This vulnerability (CVE-2024-30430) in Fluent CRM is a CWE-79 stored cross-site scripting issue caused by improper input neutralization during web page generation. It affects all versions through 2.8.44. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, high privileges, and user interaction, with a scope change and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and the vulnerability is currently published without known active exploitation.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of the affected application, potentially leading to data disclosure, modification, or disruption of service. The impact is limited by the requirement for high privileges and user interaction. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict high-privilege user access and exercise caution with user inputs that may be rendered in web pages. Monitor vendor channels for updates and apply patches promptly once available.