Security Advisory

CVE-2026-40286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-17 20:27:59

Last updated 2026-04-20 15:49:44

Assigner GitHub_M

State PUBLISHED

Description

WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the Member Registration (Cadastrar Sócio) function. By injecting a payload into the Member Name (Nome Sócio) field, the script is persistently stored in the database. Consequently, the payload is executed whenever a user navigates to certain URL. Version 3.6.10 fixes the issue.

← Browse all CVEs View on cve.org ↗