CVE-2026-61719

Prior to version 3.8.7 , the WeGIA web manager for charitable institutions is vulnerable to stored cross-site scripting (XSS) . The root cause is the lack of proper sanitization in the textoProntuario field within saude/historico_prontuarios.php. An attacker with permissions to create or access p...

CVE-2026-61719 WeGIA: Stored Cross-Site Scripting (XSS) in "historico_prontuarios.php" via "textoProntuario" Field

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in saude/historicoprontuarios.php arises because the textoProntuario field accepts arbitrary HTML or JavaScript without proper sanitization. An attacker able to create or access a...

CVE-2026-61719: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored cross-site scripting vulnerability in saude/historicoprontuarios.php arises because the textoProntuario field accepts arbitrary HTML or JavaScript without proper sanitization. An attacker able to create or access a...