Open Redirect Vulnerability in WeGIA Web Manager for Charitable Institutions
CVE-2026-23730
4.8MEDIUM
What is CVE-2026-23730?
An Open Redirect vulnerability exists in WeGIA prior to version 3.6.2, specifically within the /WeGIA/controle/control.php endpoint. This issue arises due to improper validation of the nextPage parameter in the context of specific query parameters, which allows attackers to redirect users to arbitrary external websites. Such a flaw can be exploited in various malicious activities, including phishing attacks, credential theft, and even malware distribution, leveraging the trust associated with the WeGIA domain to deceive users. It is crucial for users to update to version 3.6.2 or later to mitigate these risks.
Affected Version(s)
WeGIA < 3.6.2