CVE-2024-41502 identifies a Cross Site Scripting (CWE-79) vulnerability in Jetimob Plataforma Imobiliaria 20240627-0. The issue arises from insufficient input sanitization in the 'Observaces' field of the 'Pessoas' section, allowing an attacker to inject malicious scripts when creating or editing person records. The vulnerability has a CVSS 3.1 score of 6.1, reflecting a medium severity with network attack vector and low complexity, but requiring user interaction. No known exploits are reported in the wild, and no vendor-provided patch or remediation level is documented.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to partial confidentiality and integrity compromise of user data. The vulnerability does not impact availability. Since user interaction is required, exploitation depends on tricking a user into submitting or interacting with malicious input.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when entering data into the 'Observaces' field and consider implementing input validation or sanitization controls at the application or web server level to mitigate injection of malicious scripts.