https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:25:11.606538+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45025 CVE-2026-45025 — WeGIA: Stored XSS in html/atendido/etapa_processo.php 2026-10-07T18:25:11.624004+00:00

Affected: LabRedesCefetRJ WeGIA

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript into the "Etapas de um Processo" (html/atendido/etapa_processo.php) page, which is executed when user access the the page, enabling session hijacking and account takeover. This vulnerability is fixed in 3.7.3.