This vulnerability (CVE-2024-29816) in htdat's Woo Viet product is classified as CWE-79, indicating improper neutralization of input during web page generation leading to stored cross-site scripting (XSS). It affects versions through 1.5.2. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L) shows that the attack requires network access, low attack complexity, high privileges, and user interaction, with impacts on confidentiality, integrity, and availability at a low level. The vulnerability allows an attacker with high privileges to inject malicious scripts that persist and execute in other users' browsers, potentially leading to session hijacking or other client-side impacts. No patch or official remediation is currently documented.

Successful exploitation can lead to execution of malicious scripts in the context of other users, potentially compromising user data confidentiality, integrity, and availability to a limited extent. The attack requires high privileges and user interaction, reducing the likelihood of widespread exploitation. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and apply input validation or sanitization controls where possible to mitigate injection of malicious scripts. Monitor for suspicious activity related to script injection. Avoid relying solely on user interaction to prevent exploitation.