https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:16:11.139260+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292124 EUVD-2026-292124 2026-10-06T11:16:11.174085+00:00 EUVD-2026-292124 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40284 fkie_cve-2026-40284 2026-10-06T11:16:11.174132+00:00

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the "Destinatário" field. The payload is stored and later executed when viewing the dispatch page, impacting other users. Version 3.6.10 fixes the issue.