https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 09:39:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265996 EUVD-2026-265996 https://cve.radiocsirt.org/vuln/euvd-2026-265996 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23722 <p>WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, specifically within the html/memorando/insere_despacho.php file. The application fails to properly sanitize or encode user-supplied input via the id_memorando GET parameter before reflecting it into the HTML source (likely inside a &lt;script&gt; block or an attribute). This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the context of the user&#39;s browser session. This vulnerability is fixed in 3.6.2.</p> <p>WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, specifically within the html/memorando/insere_despacho.php file. The application fails to properly sanitize or encode user-supplied input via the id_memorando GET parameter before reflecting it into the HTML source (likely inside a &lt;script&gt; block or an attribute). This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the context of the user&#39;s browser session. This vulnerability is fixed in 3.6.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-23722