CVE-2024-11319 is an XSS vulnerability classified under CWE-79 in django CMS versions 3.11.7, 3.11.8, 4.1.2, and 4.1.3. It results from improper neutralization of input during web page generation, which could allow an attacker with high privileges and requiring user interaction to inject malicious scripts. The vulnerability has a CVSS 3.1 base score of 4.8, reflecting network attack vector, low attack complexity, high privileges required, user interaction needed, and partial confidentiality and integrity impact. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability allows Cross-Site Scripting attacks that can lead to partial compromise of confidentiality and integrity of affected systems. Exploitation requires an attacker with high privileges and user interaction, limiting the ease of exploitation. There is no indication of availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications for updates. Given the requirement for high privileges and user interaction, limiting access to trusted users and reviewing input handling may reduce risk.