What is the CVSS score of CVE-2025-53823?

CVE-2025-53823 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of PHP are affected by CVE-2025-53823?

WeGIA versions before 3.4.5 contain a SQL injection vulnerability in the member deletion function that allows authenticated users with valid credentials to compromise the entire database, including…. A patch is available.

Is there a public PoC exploit available for CVE-2025-53823?

Yes, a public proof-of-concept exploit is available for CVE-2025-53823. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-53823?

Within 24 hours: Identify all WeGIA deployments and document current versions. Within 7 days: Upgrade all WeGIA instances to version 3.4.5 or later; verify upgrades via version check in application settings. Within 30 days: Conduct database integrity audit and review access logs for the `id_socio` parameter in member deletion endpoints for suspicious activity dating back 90 days.

PHP CVE-2025-53823

EUVD-2025-21404 HIGH

SQL Injection (CWE-89)

2025-07-14 security-advisories@github.com

PHP SQLi Information Disclosure Wegia

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:26 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

3.4.5

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2025-21404

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

PoC Detected

Jul 15, 2025 - 20:15 vuln.today

Public exploit code

CVE Published

Jul 14, 2025 - 23:15 nvd

HIGH 8.8

DescriptionGitHub Advisory

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint /WeGIA/html/socio/sistema/processa_deletar_socio.php, in the id_socio parameter. This vulnerability allows the execution of arbitrary SQL commands, which can compromise the confidentiality, integrity, and availability of stored data. Version 3.4.5 fixes the issue.

AnalysisAI

WeGIA versions prior to 3.4.5 contain a SQL Injection vulnerability in the member deletion endpoint that allows authenticated users to execute arbitrary SQL commands via the id_socio parameter. This high-severity vulnerability (CVSS 8.8) compromises the confidentiality, integrity, and availability of the entire database. The vulnerability requires valid credentials to exploit but offers complete database compromise once authenticated.

Technical ContextAI

The vulnerability exists in /WeGIA/html/socio/sistema/processa_deletar_socio.php, a PHP-based endpoint designed to delete member records. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), indicating that user-supplied input in the id_socio parameter is directly concatenated into SQL queries without proper parameterization or input validation. WeGIA is a Portuguese-language web management system tailored for charitable institutions (NGOs, social organizations), making the affected user base primarily non-profit entities managing member databases. The lack of prepared statements or input sanitization allows attackers to inject SQL metacharacters and execute arbitrary database commands.

RemediationAI

Immediate remediation: (1) Upgrade WeGIA to version 3.4.5 or later, which contains the fix for this SQL Injection vulnerability; (2) Short-term mitigation for unpatched systems: Implement Web Application Firewall (WAF) rules to block SQL metacharacters in the id_socio parameter (filter single quotes, double quotes, semicolons, and SQL keywords like UNION, SELECT, DROP); (3) Apply principle of least privilege to database accounts used by WeGIA—limit to SELECT, INSERT, UPDATE, DELETE only on necessary tables; (4) Restrict access to the /WeGIA/html/socio/sistema/ endpoint using network-level access controls to trusted administrators; (5) Enable database query logging and audit logs to detect exploitation attempts; (6) For long-term security: Ensure all user input is validated against a strict allowlist (id_socio should be numeric only), use parameterized queries/prepared statements in all PHP code, and implement code review processes for SQL-generating functions.