Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:30 p.m.•20 views

CVE-2026-42872

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting XSS vulnerability exists in listaarquivosetapa.php due to improper handling of user-supplied input. The idprocesso parameter is directly embedded into the HTML without sanitization,...

6.1CVSS5.8AI score0.00303EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/11 6:32 p.m.•19 views

EUVD-2026-29187

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting XSS vulnerability exists in listaarquivosetapa.php due to improper handling of user-supplied input. The idprocesso parameter is directly embedded into the HTML without sanitization,...

6.1CVSS6AI score0.00303EPSS
SaveExploits0References1
OSV
OSV
•added 2026/05/11 6:32 p.m.•14 views

CVE-2026-42872 WeGIA: Reflected XSS in listar_arquivos_etapa.php

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting XSS vulnerability exists in listaarquivosetapa.php due to improper handling of user-supplied input. The idprocesso parameter is directly embedded into the HTML without sanitization,...

6.1CVSS6.2AI score
SaveExploits0References3
CVE
CVE
•added 2026/05/11 6:32 p.m.•40 views

CVE-2026-42872

WeGIA is affected by a reflected XSS in listar_arquivos_etapa.php (id_processo parameter) prior to version 3.7.0, where unsanitized user input is embedded into HTML. This can enable an attacker to inject arbitrary JavaScript, potentially leading to session hijacking, credential theft, or maliciou...

6.1CVSS6.1AI score0.00303EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/11 6:32 p.m.•51 views

CVE-2026-42872 WeGIA: Reflected XSS in listar_arquivos_etapa.php

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting XSS vulnerability exists in listaarquivosetapa.php due to improper handling of user-supplied input. The idprocesso parameter is directly embedded into the HTML without sanitization,...

6.1CVSS0.00303EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/11 12:00 a.m.•1 views

CVE-2026-42872: Improper Neutralization of Input During Web Page Generation

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.0, a reflected Cross-Site Scripting XSS vulnerability exists in listaarquivosetapa.php due to improper handling of user-supplied input. The idprocesso parameter is directly embedded into the HTML without sanitization,...

6.1CVSS6AI score0.00303EPSS
SaveExploits0References2
Rows per page
Query Builder