CVE-2025-6699 | LabRedesCefetRJ WeGIA 3.4.0 Cadastro de Funcionário cadastro_funcionario.php Nome/Sobrenome cross site scripting

June 26, 2025 Yanac

A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of the file /html/funcionario/cadastro_funcionario.php of the component Cadastro de Funcionário. The manipulation of the argument Nome/Sobrenome leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-6699. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

This is a different issue than CVE-2025-23030. The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More