Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the "Nome" field in the "Informações Pacientes" page. The payload is stored and executed when the patient information is viewed. Version 3.6.10 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨*CVE* CVE-2026-40283 WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inj… https://www.cve.org/CVERecord?id=CVE-2026-40283 ----- Traducción: CVE-2026-40283 WeG… http://infoflow.cloud`
Post summary
An earlier version of WeGIA (pre‑3.6.10) contains a stored XSS flaw that could be exploited by authenticated users.
CVE-2026-40283 WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inj… https://www.cve.org/CVERecord?id=CVE-2026-40283
Post summary
The message announces CVE-2026-40283, describing a stored XSS flaw in WeGIA versions prior to 3.6.10 that can be exploited by authenticated users, with no evidence of exploitation or mitigation mentioned.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wegia | wegia | - | - | - |