CVE-2026-40282
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting XSS vulnerability allows an authenticated user to inject malicious JavaScript into the IntercorrĂȘncias notification page, which is executed when user access the the page, enabling sessio...
