CVE-2026-23722

WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, specifically within the html/memorando/insere_despacho.php file. The application fails to properly sanitize or encode user-supplied input via the id_memorando GET parameter before reflecting it into the HTML source (likely inside a <script> block or an attribute). This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the context of the user's browser session. This vulnerability is fixed in 3.6.2.

• CWE-79

• https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g7hh-6qj7-mcqfExploit, Mitigation, Vendor Advisory

Published

Jan 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23716A vulnerability has been identified in Simcenter Femap (All …7.3
• CVE-2026-23717A vulnerability has been identified in Simcenter Femap (All …7.3
• CVE-2026-23718A vulnerability has been identified in Simcenter Femap (All …7.3
• CVE-2026-23719A vulnerability has been identified in Simcenter Femap (All …7.3
• CVE-2026-23720A vulnerability has been identified in Simcenter Femap (All …7.3
• CVE-2026-23721OpenProject is an open-source, web-based project management …4.3
• CVE-2026-23723WeGIA is a web manager for charitable institutions. Prior to…7.2
• CVE-2026-23724WeGIA is a web manager for charitable institutions. Prior to…5.4
• CVE-2026-23725WeGIA is a web manager for charitable institutions. Prior to…5.4
• CVE-2026-23726WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-23727WeGIA is a web manager for charitable institutions. Prior to…6.1
• CVE-2026-23728WeGIA is a web manager for charitable institutions. Prior to…6.1