CVE-2026-61671

The WeGIA web manager for charitable institutions is vulnerable to systemic IDOR and missing CSRF protection in versions prior to 3.8.7 . The /controle/control.php endpoint uses extract($_REQUEST) to process parameters like nomeClasse and metodo, allowing authenticated users to bypass ownership c...