{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-24T07:37:15.300","vulnerabilities":[{"cve":{"id":"CVE-2026-23724","sourceIdentifier":"security-advisories@github.com","published":"2026-01-16T20:15:50.310","lastModified":"2026-06-17T10:21:59.910","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"WeGIA is a web manager for charitable institutions. Prior to 3.6.2, a Stored Cross-Site Scripting (XSS) vulnerability was identified in the html/atendido/cadastro_ocorrencia.php endpoint of the WeGIA application. The application does not sanitize user-controlled data before rendering it inside the “Atendido” selection dropdown. This vulnerability is fixed in 3.6.2."},{"lang":"es","value":"WeGIA es un gestor web para instituciones benéficas. Previo a la 3.6.2, se identificó una vulnerabilidad de cross-site scripting (XSS) almacenado en el endpoint html/atendido/cadastro_ocorrencia.php de la aplicación WeGIA. La aplicación no sanitiza los datos controlados por el usuario antes de renderizarlos dentro del menú desplegable de selección 'Atendido'. Esta vulnerabilidad está corregida en la 3.6.2."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"LabRedesCefetRJ","product":"WeGIA","versions":[{"version":"< 3.6.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.3,"impactScore":2.7}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-16T21:32:55.745192Z","id":"CVE-2026-23724","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wegia:wegia:*:*:*:*:*:*:*:*","versionEndExcluding":"3.6.2","matchCriteriaId":"419B3A85-5754-4198-A73E-92A9DA8E7A68"}]}]}],"references":[{"url":"https://github.com/LabRedesCefetRJ/WeGIA/pull/1333","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/releases/tag/3.6.2","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-3r3q-8573-g3cq","source":"security-advisories@github.com","tags":["Exploit","Vendor Advisory"]}]}}]}