4 matches found
CVE-2026-45025
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript into the "Etapas de um Processo" html/atendido/etapaprocesso.php page, which is executed when user access the...
EUVD-2026-29194
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript into the "Etapas de um Processo" html/atendido/etapaprocesso.php page, which is executed when user access the...
CVE-2026-45025 WeGIA: Stored XSS in html/atendido/etapa_processo.php
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript into the "Etapas de um Processo" html/atendido/etapaprocesso.php page, which is executed when user access the...
CVE-2026-45025
WeGIA is affected by a Stored XSS in the html/atendido/etapa_processo.php page prior to version 3.7.3. An authenticated user can inject malicious JavaScript that executes when the page is loaded, enabling session hijacking and potential account takeover. The issue is fixed in version 3.7.3. CVSS ...