CVE-2026-40284 | LabRedesCefetRJ WeGIA up to 3.6.9 Destinatário cross site scripting (GHSA-mccp-8446-phw5)

A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.6.9 and classified as problematic. Affected by this vulnerability is an unknown functionality. Executing a manipulation of the argument Destinatário can lead to cross site scripting.

This vulnerability appears as CVE-2026-40284. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.