CVE-2026-33991

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file "html/socio/sistema/deletartag.php" uses "extract$REQUEST" on line 14 and directly concatenates the "$idtag" variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7...