This vulnerability (CVE-2024-29793) affects MailChimp Forms by MailMunch through version 3.2.2 and is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). It allows stored cross-site scripting attacks, where malicious input is not properly sanitized before being rendered in web pages. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, privileges, and user interaction, and can impact confidentiality, integrity, and availability in a scope-changing manner. No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation can lead to stored XSS, potentially allowing attackers to execute arbitrary scripts in the context of affected users. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. The vulnerability requires attacker privileges and user interaction, limiting the ease of exploitation. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with input handling in MailChimp Forms by MailMunch and consider implementing additional input validation or output encoding as a temporary mitigation. Monitor vendor communications for updates on patches or official fixes.