WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the WeGIA system, spe…

A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in WeGIA, a Web Manager for Charitable Institutions, prior to version 3.6.2. The vulnerability exists in the html/memorando/insere_despacho.php file where the application fails to properly sanitize user-supplied input via the id_memorando GET parameter. This allows unauthenticated attackers to inject arbitrary JavaScript or HTML into the user's browser session context. The vulnerability occurs when user input is reflected into the HTML source, likely within a script block or attribute. The issue has been fixed in version 3.6.2 of WeGIA.