Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2026-40282

WeGIA has stored XSS in intercorrencia_visualizar.php

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript into the Intercorrências notification page, which is executed when user access the the page, enabling session hijacking and account takeover. Version 3.6.10 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

LabRedesCefetRJ WeGIA

  • < 3.6.10affected

References