CVE-2025-53821CWE-601

WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'

Medium · published July 14, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. An Open Redirect vulnerability exists in the web application prior to version 3.4.5. The control.php endpoint allows to specify an arbitrary URL via the `nextPage` parameter, leading to an uncontrolled redirection. Version 3.4.5 contains a fix for the issue.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-07-14T22:16Z
EPSS history
Timeline
  • 14 JUL 22:16Z
    WeGIA vulnerable to Open Redirect in endpoint 'control.php' parameter 'nextPage'
    cvelistv5