Description
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the -Member Registration- (Cadastrar Sócio) function. By injecting a payload into the -Member Name- (Nome Sócio) field, the script is persistently stored in the database. Consequently, the payload is executed whenever a user navigates to certain URL. Version 3.6.10 fixes the issue.
CVSS 7.5EPSS 0.209%Risque 0.76
Voir la source- Publication
- 2026-04-17 21:16:34
- Versions concernées
- <3.6.10
- Type
- Installed app
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N