High severity8.7NVD Advisory· Published Sep 4, 2026· Updated Sep 17, 2026
CVE-2026-79419
CVE-2026-79419
Description
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=8.4+ 1 more
- (no CPE)range: <=8.4
- cpe:2.3:a:emxtecnologia:gestao_x_business_suite:*:*:*:*:*:*:*:*range: <=8.4
Patches
Vulnerability mechanics
References
2- drive.google.com/file/d/1QVH1MRo3G4KqmBORkhXITzcYmO_BDjWc/viewnvdExploitTechnical DescriptionThird Party Advisory
- emxtecnologia.com.br/gestao-x-business-suite/nvdProduct
News mentions
0No linked articles in our index yet.