VYPR

LabRedesCefetRJ/WeGIA

by GitHub

CVEs (1)

  • CVE-2026-28411CriFeb 27, 2026
    risk 0.64cvss 9.8epss 0.01

    WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the `extract()` function on the `$_REQUEST` superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to…