This vulnerability (CVE-2024-13064) affects Akinsoft MyRezzta, specifically versions from s2.02.02 before v2.05.01. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) reflects that the vulnerability requires network access, low attack complexity, high privileges, and user interaction, with limited confidentiality, integrity, and availability impacts. No vendor advisory or patch information is currently provided, and no exploits are known in the wild.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. However, the overall impact is considered medium severity based on the CVSS score of 4.3. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting access to the affected versions and apply any available workarounds recommended by the vendor. Monitor vendor channels for updates regarding patches or official mitigations.