This vulnerability (CVE-2024-32428) affects Moss Web Works MWW Disclaimer Buttons up to version 3.0.2 and is classified as CWE-79, indicating improper neutralization of input leading to stored cross-site scripting (XSS). The flaw allows an attacker with high privileges to inject malicious scripts that are stored and later executed in the context of a victim's browser, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are high, user interaction is required, and the scope is changed. The impact includes low confidentiality, integrity, and availability impacts. No patch or official remediation level has been provided by the vendor as of the publication date.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute stored malicious scripts in users' browsers. This can lead to partial compromise of confidentiality, integrity, and availability of affected systems. However, the impact is rated medium due to the required privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit high-privilege access to the affected product and apply any available input validation or filtering controls where possible. Monitor vendor channels for updates regarding patches or mitigations.