This vulnerability (CVE-2024-32080) in Nick Pelton Search Keyword Redirect is a Stored Cross-site Scripting (CWE-79) issue caused by improper input neutralization during web page generation. It allows an attacker with high privileges and user interaction to inject malicious scripts that can be stored and later executed in a victim's browser. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level. No official patch or remediation guidance is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to data disclosure, modification, or disruption of service. However, exploitation requires high privileges and user interaction, which limits the ease of attack. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to the affected application to trusted users only and monitor for suspicious activity. Avoid granting unnecessary high privileges to users to reduce risk.