This vulnerability (CVE-2024-30181) affects Plainware Locatoraid Store Locator versions up to 3.9.30 and is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). It allows stored cross-site scripting (XSS) attacks, where malicious scripts can be injected and persist in the application, potentially executed in the context of other users. The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, low attack complexity, requiring high privileges and user interaction, and impacts on confidentiality, integrity, and availability with low severity.

Successful exploitation of this stored XSS vulnerability could allow an attacker with high privileges to inject malicious scripts that execute in the browsers of users who view the affected pages. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, exploitation requires user interaction and high privileges, limiting the ease of attack.

No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, users should restrict high privilege access and be cautious with user input handling in the affected application to reduce risk.