CVEvulnerability
CVE-2024-41504
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-06-10
- Last modified
- 2026-07-05
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportunities) section of the application when creating or editing an "Atividade" (activity), the form field "Descrico" allows injection of JavaScript.
Affected configurations
• jetimob imobiliaria 2024-06-27
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/rafaelbaldasso/CVE-2024-41504 Exploit, Third Party Advisory
- https://github.com/rafaelbaldasso/CVE-2024-41504 Exploit, Third Party Advisory