CVE-2026-79418

Description

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.

Traduire en français

Produits concernés

• Emxtecnologia gestao x business suite

Scores CVSS

Faiblesses (CWE)

• CWE-79

Références

• https://drive.google.com/file/d/1mp-uS-tAthH9FAObfx1D3lOM7IIjRsmE/view?usp=sharing ExploitTechnical DescriptionThird Party Advisory
• https://emxtecnologia.com.br/gestao-x-business-suite/ Product

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories