This vulnerability (CVE-2024-29772) in MyBookTable Bookstore involves CWE-79, where user input is not properly sanitized before being included in web pages, enabling stored cross-site scripting attacks. The affected versions include all releases up to 3.3.7. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) indicates that the attack can be performed remotely with low complexity, requires some privileges and user interaction, and can lead to partial confidentiality, integrity, and availability impacts. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation could allow an attacker to inject malicious scripts that execute in the context of other users' browsers, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium based on the CVSS score and includes partial loss of confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation and output encoding controls where possible to mitigate stored XSS risks. Monitoring for suspicious input and restricting privileges may reduce exposure. No official vendor remediation or temporary fix is currently documented.