CVE-2026-33991
WeGIA is a web manager for charitable institutions.
Published Mar 27, 2026 · updated Jun 17, 2026 · wegia wegia
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file uses on line 14 and directly concatenates the variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 27, 2026 · NIST NVD
Detected
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file uses on line 14 and directly concatenates the variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.
Jun 17, 2026 · NIST NVD
Updated
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file uses on line 14 and directly concatenates the variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches the vulnerability.
Affected
- cpe wegia/wegiaversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33991
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33991
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file uses on line 14 and directly concatenates the variable into SQL queries on lines 16-17 without prepared statements or sanitizat
nvd.nist.gov