This vulnerability (CVE-2024-12914) affects Akınsoft QR Menü versions starting from s1.05.05 up to but not including v1.05.12. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The CVSS 3.1 base score is 4.3 (medium severity), with an attack vector of network, low attack complexity, requiring high privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation level has been published, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. However, the overall severity is medium, reflecting the conditions required for exploitation and the limited impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with input handling and consider applying any recommended workarounds from the vendor. Monitor vendor channels for updates regarding patches or mitigations.