CVE-2024-22160 is a reflected Cross-site Scripting (CWE-79) vulnerability affecting Bradley B. Dalina Image Tag Manager through version 1.5. The flaw is due to improper input neutralization during web page generation, which allows attackers to inject and execute arbitrary scripts in a victim's browser session. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor. The vulnerability is not related to a cloud service and no known exploits have been reported.

Successful exploitation of this vulnerability can allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to theft of sensitive information, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The CVSS score of 7.1 reflects these impacts as high severity. However, no known exploits are currently reported in the wild.

No official patch or remediation guidance is currently available from the vendor. Users should monitor the vendor's advisories for any forthcoming fixes. Until a patch is released, avoid exposing the vulnerable application to untrusted input or implement web application firewall (WAF) rules to detect and block reflected XSS attempts. Do not assume the vulnerability is mitigated without vendor confirmation.