Descrição
WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript into the -Etapas de um Processo- (html/atendido/etapa_processo.php) page, which is executed when user access the the page, enabling session hijacking and account takeover. This vulnerability is fixed in 3.7.3.
CVSS 6.8EPSS 0.22999999999999998%Risco 0.69
Ver fonte- Publicação
- 2026-05-11 20:25:46
- Versões afetadas
- <3.7.3
- Tipo
- Core software
- Vetor
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N