Beveiligingsadvies

CVE-2026-79418

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-04 00:00:00
Laatst bijgewerkt 2026-09-15 18:50:00
Toegewezen door mitre
CVSS-score 8.7
Status PUBLISHED

Beschrijving

EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.