This vulnerability (CVE-2024-13071) affects Akinsoft e-Mutabakat versions starting from 2.02.05 up to but not including 2.02.06. It is classified as CWE-79, indicating improper neutralization of input during web page generation, which leads to Cross-Site Scripting (XSS). The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) reflects that the attack requires network access, low attack complexity, high privileges, and user interaction, with limited confidentiality, integrity, and availability impacts. No official fix or patch has been documented yet, and no known exploits have been observed. The vulnerability is not related to a cloud service, so remediation depends on vendor patching.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of the affected web application, potentially leading to limited confidentiality, integrity, and availability impacts. However, the overall severity is medium, and no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor Akinsoft advisories for updates. Until a patch is available, restricting high-privilege user access and minimizing exposure to untrusted inputs may reduce risk.