This vulnerability (CVE-2024-29114) in W3 Eden, Inc. Download Manager is a stored cross-site scripting (CWE-79) issue caused by improper input neutralization during web page generation. It affects versions through 3.2.84 and allows an attacker with limited privileges and user interaction to inject malicious scripts that can execute in a victim's browser session. The CVSS score of 6.5 reflects the network attack vector, low attack complexity, required privileges, and user interaction, with impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor, and no cloud service is involved.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact affects confidentiality, integrity, and availability to a limited extent as reflected by the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and consider applying any available workarounds recommended by the vendor. Monitor official channels from W3 Eden, Inc. for updates and patches.