CVE-2024-41503 identifies a Cross Site Scripting (XSS) vulnerability in Jetimob Plataforma Imobiliaria 20240627-0. The issue exists in the "Ttulo" (title) field inside the filter Save option of the "Busca" (search) function, where user input is not properly sanitized or encoded. This allows an attacker to inject and execute arbitrary scripts in the context of a victim's browser session, potentially leading to information disclosure or session hijacking. The vulnerability has a CVSS v3.1 score of 6.1 (medium severity) with attack vector network, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality and integrity but not availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected user's browser session. This may lead to partial confidentiality and integrity impacts such as theft of sensitive information or manipulation of displayed content. There is no impact on system availability. The vulnerability requires user interaction and can be exploited remotely over the network without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users and administrators should exercise caution when interacting with untrusted input in the "Ttulo" field of the filter Save option in the search function. Implementing web application firewall (WAF) rules to detect and block typical XSS payloads may provide temporary mitigation. Avoid clicking on suspicious links or inputs that may trigger the vulnerability.