Vulnerability Description
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emxtecnologia | Gestao X Business Suite | <= 8.4 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1mp-uS-tAthH9FAObfx1D3lOM7IIjRsmE/view?usp=shariExploitTechnical DescriptionThird Party Advisory
- https://emxtecnologia.com.br/gestao-x-business-suite/Product
FAQ
What is CVE-2026-79418?
CVE-2026-79418 is a vulnerability with a CVSS score of 8.7 (HIGH). EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page gener...
How severe is CVE-2026-79418?
CVE-2026-79418 has been rated HIGH with a CVSS base score of 8.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-79418?
Check the references section above for vendor advisories and patch information. Affected products include: Emxtecnologia Gestao X Business Suite.