CVE-2024-32526 is a stored cross-site scripting vulnerability in Flector Easy Textillate (up to version 2.02) caused by improper input neutralization during web page generation. This allows an attacker with low privileges to inject malicious scripts that execute in the context of other users' browsers, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). No official patch or remediation guidance is currently available from the vendor, and no known exploits have been reported.

Successful exploitation of this vulnerability can lead to stored XSS attacks, which may allow an attacker to execute arbitrary scripts in the context of affected users. This can result in limited disclosure of information, modification of data, or disruption of service. The CVSS score reflects a medium severity with partial impact on confidentiality, integrity, and availability. No evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply standard XSS mitigations such as input validation and output encoding where possible. Monitor vendor communications for updates and patches. No vendor advisory indicates that the issue is already mitigated or no action is required.