CVE-2026-45026: CVE-2026-45026: siteler arası betik çalıştırma (XSS)

Açıklama (NVD)

WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript into the Processo de Aceitação (html/atendido/processo_aceitacao.php) page, which is executed when user access the the page, enabling session hijacking and account takeover. This vulnerability is fixed in 3.7.3.

Özet bilgiler

CVSS v3.1

6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

EPSS

%0,29 (yüzdelik 21)

CWE

CWE-79

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• github.com
• CWE-79