CVE-2024-41504

Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportunities) section of the application when creating or editing an "Atividade" (activity), the form field "Descrico" allows injection of JavaScript.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.24% chance of exploitation in the next 30 days, 15th percentile

Published

2025-06-10

Updated

2026-07-05

Proof-of-concept exploits (1)

• rafaelbaldasso/CVE-2024-415040★ · 2024-08-02

References

• CVE Record
• NVD entry

Related

• CVE-2024-41502
• CVE-2024-41503
• CVE-2024-41505
• CVE-2024-4157
• CVE-2024-41492
• CVE-2024-41570