CVE-2024-29766 is a CWE-79 stored cross-site scripting vulnerability affecting StreamWeasels Twitch Integration up to version 1.7.5. The issue results from improper input sanitization during web page generation, enabling attackers to inject and store malicious scripts that execute in the context of other users' browsers. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, user interaction needed, and partial impact on confidentiality, integrity, and availability. No official patch or vendor remediation level is currently documented. The product is not a cloud service, so remediation depends on vendor updates or user-applied fixes.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to theft of user credentials, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability. The impact is limited to users interacting with the vulnerable integration. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply strict input validation and output encoding where possible to mitigate stored XSS risks. Monitoring vendor channels for updates is recommended. No vendor advisory or official fix is currently available.