← Back

Emxtecnologia

emxtecnologia

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Gestao X Business Suite
gestao_x_business_suite
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-79419
1Emxtecnologia
1Gestao X Business Suite
Sep 17, 2026
Sep 4, 2026
N/A· v4
8.7 HIGH· v3
N/A· v2
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in...Show more
A reflected cross-site scripting (XSS) vulnerability exists in EMX Tecnologia Gestao X Business Suite 8.4 and earlier. The vulnerability is caused by insufficient validation and sanitization of the mensagem parameter in the /Configuracao/Imagens.aspx endpoint, allowing an authenticated attacker to inject arbitrary JavaScript code that is reflected and executed in the context of a victim's browser.Show less
CVE-2026-79418
1Emxtecnologia
1Gestao X Business Suite
Sep 17, 2026
Sep 4, 2026
N/A· v4
8.7 HIGH· v3
N/A· v2
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authent...Show more
EMX Tecnologia Gestao X version <= 8.4 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Help Chat functionality. Improper neutralization of user-controlled input during web page generation allows authenticated attackers to execute arbitrary JavaScript in the context of other authenticated users, potentially resulting in session hijacking, account takeover, and unauthorized actions.Show less