High severity8.7NVD Advisory· Published Sep 4, 2026· Updated Sep 17, 2026
CVE-2026-79418
CVE-2026-79418
Description
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:emxtecnologia:gestao_x_business_suite:*:*:*:*:*:*:*:*Range: <=8.4
- Range: <=8.4
Patches
Vulnerability mechanics
References
2- drive.google.com/file/d/1mp-uS-tAthH9FAObfx1D3lOM7IIjRsmE/viewnvdExploitTechnical DescriptionThird Party Advisory
- emxtecnologia.com.br/gestao-x-business-suite/nvdProduct
News mentions
0No linked articles in our index yet.