This vulnerability (CVE-2024-12974) affects Akinsoft ProKuaför software versions from s1.02.07 before v1.02.08. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity but requiring high privileges and user interaction, resulting in limited confidentiality, integrity, and availability impacts. No vendor advisory or patch information is provided, and the product is not a cloud service.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of the affected application, potentially leading to limited disclosure or modification of information and partial disruption of service. However, the impact is rated medium and no active exploits are known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit exposure by restricting access to trusted users with high privileges and exercising caution with user input. Monitor vendor channels for updates regarding patches or official mitigations.