Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:46:16 +0000 CVE-2026-40284 — WeGIA has stored XSS in listar_despachos.php https://cve.radiocsirt.org/vuln/cve-2026-40284 <p><strong>Affected:</strong> LabRedesCefetRJ WeGIA</p> <p>WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the &#34;Destinatário&#34; field. The payload is stored and later executed when viewing the dispatch page, impacting other users. Version 3.6.10 fixes the issue.</p> <p><strong>Affected:</strong> LabRedesCefetRJ WeGIA</p> <p>WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the &#34;Destinatário&#34; field. The payload is stored and later executed when viewing the dispatch page, impacting other users. Version 3.6.10 fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-40284