Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inject malicious JavaScript via the "Destinatário" field. The payload is stored and later executed when viewing the dispatch page, impacting other users. Version 3.6.10 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
CVE-2026-40284 WeGIA is a web manager for charitable institutions. In versions prior to 3.6.10, a Stored Cross-Site Scripting (XSS) vulnerability allows an authenticated user to inj… https://www.cve.org/CVERecord?id=CVE-2026-40284
Post summary
The CVE-2026-40284 vulnerability is a stored XSS that affects WeGIA versions before 3.6.10, with no evidence of a PoC, exploit tool, active attacks, or explicit patch details beyond the version note.
CVE-2026-40284 Stored Cross-Site Scripting in WeGIA Versions Prior to 3.6.10 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40284
Post summary
The post announces CVE‑2026‑40284, a stored XSS flaw in WeGIA versions earlier than 3.6.10, without detailing exploits, patches, or active exploitation.