https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:45:56.198222+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-35399 CVE-2026-35399 — WeGIA has Stored XSS in backup file names 2026-10-08T22:45:56.199487+00:00

Affected: LabRedesCefetRJ WeGIA

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, a stored XSS vulnerability allows an attacker to inject malicious scripts through a backup filename. This could lead to unauthorized execution of malicious code in the victim's browser, compromising session data or executing actions on behalf of the user. This vulnerability is fixed in 3.6.9.