Beschreibung
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript into the Processo de Aceitação (html/atendido/processo_aceitacao.php) page, which is executed when user access the the page, enabling session hijacking and account takeover. This vulnerability is fixed in 3.7.3.
CVSS 6.8EPSS 0.22999999999999998%Risiko 0.69
Quelle öffnen- Veröffentlicht
- 2026-05-11 20:25:47
- Betroffene Versionen
- <3.7.3
- Typ
- Core software
- Vektor
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N