Vulnerabilities

TI-2026-82779 CVE-2026-61719

Stored cross-site scripting in WeGIA patient medical record field

HIGH 74

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00236 Published 2026-10-29 Fixed in 3.8.7 CWE-79

TI-2026-82777 CVE-2026-61673

Stored DOM cross-site scripting in WeGIA memorandum threads

MEDIUM 61

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00334 Published 2026-10-29 Fixed in 3.8.7 CWE-79

TI-2026-82776 CVE-2026-61671

Authorization bypass in WeGIA lets users access other users' records

HIGH 70

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00163 Published 2026-10-29 Fixed in 3.8.7 CWE-352

TI-2026-74470 CVE-2026-55684

SQL injection in WeGIA lets unauthenticated attackers run SQL

MEDIUM 49

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00474 Published 2026-10-14 Fixed in 3.8.6 CWE-89

TI-2026-74468 CVE-2026-55682

Session fixation and database host disclosure in WeGIA

HIGH 70

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00435 Published 2026-10-14 Fixed in 3.8.6 CWE-200

TI-2026-74467 CVE-2026-55681

SQL injection in WeGIA lets authenticated users run arbitrary SQL

HIGH 73

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00569 Published 2026-10-14 Fixed in 3.8.6 CWE-89

TI-2026-74465 CVE-2026-55679

Pre-auth installer injection in WeGIA enables command execution

MEDIUM 62

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00521 Published 2026-10-14 Fixed in 3.8.6 CWE-78

TI-2026-74466 CVE-2026-55680

Unauthenticated SQL injection in WeGIA billing endpoint

MEDIUM 49

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00492 Published 2026-10-14 Fixed in 3.8.6 CWE-89

TI-2026-74469 CVE-2026-55683

SQL injection in WeGIA lets remote attackers read and modify data

HIGH 82

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00592 Published 2026-10-14 Fixed in 3.8.6 CWE-89

TI-2026-39573 CVE-2026-54767

WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

HIGH 78

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00784 Published 2026-09-17 Fixed in 3.8.5 CWE-306

TI-2026-39494 CVE-2026-54671

WeGIA: Authorization Bypass via Empty Resource Array in InternoControle

HIGH 73

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00569 Published 2026-09-17 Fixed in 3.8.5 CWE-639

TI-2026-39493 CVE-2026-54670

WeGIA: Unauthenticated Auth Bypass + Local File Inclusion

HIGH 80

WeGIA is a web manager for charitable institutions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00844 Published 2026-09-17 Fixed in 3.8.5 CWE-22

TI-2026-53548 CVE-2026-76634 · GHSA-56r8-9xc4-3g79

WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php

MEDIUM 64

WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an id_pessoa parameter thro…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-08-20 Fixed in 3.9.2 CWE-639

TI-2026-53547 CVE-2026-76633 · GHSA-8248-cv95-x854

WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

MEDIUM 40

WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any authenticated user to change their account password without providing existing credentials by exploiting the u…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00438 Published 2026-08-20 Fixed in 3.9.2 CWE-620

TI-2026-33131 CVE-2026-45335

WeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage

MEDIUM 58

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0018 Published 2026-05-27 Fixed in 3.7.3 CWE-601

TI-2026-32881 CVE-2026-45027

WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php

MEDIUM 60

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00169 Published 2026-05-27 Fixed in 3.7.3 CWE-759

TI-2026-32880 CVE-2026-45026

WeGIA: Stored XSS in html/atendido/processo_aceitacao.php

MEDIUM 63

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00287 Published 2026-05-11 Fixed in 3.7.3 CWE-79

TI-2026-32879 CVE-2026-45025

WeGIA: Stored XSS in html/atendido/etapa_processo.php

MEDIUM 63

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00287 Published 2026-05-11 Fixed in 3.7.3 CWE-79

TI-2026-31079 CVE-2026-42873

WeGIA: Error Handling Upload DocDependente

LOW 36

WeGIA is a web manager for charitable institutions.

CVSS 3.1N/A 0.0 Network Low privileges No interaction EPSS 0.00234 Published 2026-05-11 Fixed in 3.6.10 CWE-200

TI-2026-31078 CVE-2026-42872

WeGIA: Reflected XSS in listar_arquivos_etapa.php

MEDIUM 60

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00214 Published 2026-05-11 Fixed in 3.7.0 CWE-79

TI-2026-31076 CVE-2026-42870

WeGIA: Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'

MEDIUM 62

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.0035 Published 2026-05-11 Fixed in 3.7.0 CWE-79

TI-2026-31077 CVE-2026-42871

WeGIA: Error Handling familiar_docfamiliar

HIGH 70

WeGIA is a web manager for charitable institutions.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00253 Published 2026-05-11 Fixed in 3.7.0 CWE-200

TI-2026-29068 CVE-2026-40286

WeGIA has Cross-Site Scripting in Controle de Contribuição

HIGH 66

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00209 Published 2026-04-17 Fixed in 3.6.10 CWE-79

TI-2026-29067 CVE-2026-40285

WeGIA has SQL Injection via Session Variable Override in DespachoControle.php

HIGH 73

WeGIA is a web manager for charitable institutions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00319 Published 2026-04-17 Fixed in 3.6.10 CWE-302

TI-2026-29066 CVE-2026-40284

WeGIA has stored XSS in listar_despachos.php

MEDIUM 63

WeGIA is a web manager for charitable institutions.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0023 Published 2026-04-17 Fixed in 3.6.10 CWE-79

Vulnerabilities

Filters