CVE-2026-35473

WeGIA (Web manager for charitable institutions) prior to version 3.6.9 contained an open redirect vulnerability in the /WeGIA/controle/control.php endpoint. The issue arises from an unvalidated nextPage parameter when the request uses metodo=listarId and nomeClasse=IentradaControle, allowing atta...

CVE-2026-35473 WeGIA - Open Redirect - IentradaControle - listarId() - Unvalidated $_GET['nextPage']

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IentradaControle. T...