CVE-2024-41504 identifies a Cross Site Scripting (XSS) vulnerability in Jetimob Plataforma Imobiliaria 20240627-0. The issue occurs in the 'Oportunidades' section when users create or edit an 'Atividade' and input data into the 'Descrico' field, which improperly sanitizes input, allowing JavaScript injection. The CVSS 3.1 base score is 6.1, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality and integrity but not availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript in the context of the affected application, potentially leading to unauthorized disclosure or modification of data accessible to the user. There is no indication of availability impact or known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted input in the 'Descrico' field. No official fix or temporary workaround has been documented at this time.