| Package | Affected versions | Patched versions |
|---|---|---|
| wegia | < 3.6.9 | 3.6.9 |
WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, the redirect parameter is taken directly from $_GET with no URL validation or whitelist check, then used verbatim in a header("Location: ...") call. This vulnerability is fixed in 3.6.9.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free