Vulnerability Details CVE-2026-79419
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 9.1%
CVSS Severity
CVSS v3 Score 8.7
References
Products affected by CVE-2026-79419
-
cpe:2.3:a:emxtecnologia:gestao_x_business_suite:*