A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Emxtecnologia |
|
No data.
No data.
References
History
Thu, 10 Sep 2026 05:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated Reflected XSS via mensagem Parameter in EMX Gestão X Business Suite 8.4 |
Wed, 09 Sep 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Mon, 07 Sep 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Emxtecnologia
Emxtecnologia gestao X Business Suite |
|
| Vendors & Products |
Emxtecnologia
Emxtecnologia gestao X Business Suite |
Sat, 05 Sep 2026 05:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-79 |
Sat, 05 Sep 2026 04:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Reflected XSS via mensagem Parameter in EMX Tecnologia Gestao X Business Suite 8.4 | |
| Weaknesses | CWE-79 |
Sat, 05 Sep 2026 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an unauthenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser. | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser. |
Fri, 04 Sep 2026 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Reflected XSS via mensagem Parameter in EMX Tecnologia Gestao X Business Suite 8.4 | |
| Weaknesses | CWE-79 |
Fri, 04 Sep 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an unauthenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2026-09-04T00:00:00.000Z
Updated: 2026-09-09T19:54:49.651Z
Reserved: 2026-08-25T00:00:00.000Z
Link: CVE-2026-79419
Vulnrichment
No data.
NVD
Status : Deferred
Published: 2026-09-04T16:18:00.250
Modified: 2026-09-09T20:20:43.217
Link: CVE-2026-79419
Redhat
No data.