PT-2026-95157

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.8.5 Description The contribution request dispatcher in the endpoint 'web/html/contribuicao/controller/control.php' accepts attacker-controlled nomeClasse and metodo values without a complete allowlist. This allows...