This vulnerability (CVE-2024-32831) involves improper input sanitization in the Lorna Timbah (webgrrrl) Accessibility Widget, leading to stored Cross-site Scripting (CWE-79). Attackers can inject malicious scripts that persist on the affected web pages, potentially impacting confidentiality, integrity, and availability with low privileges required and user interaction needed. The widget versions up to 2.2 are affected. No vendor advisory or patch information is currently provided.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of users visiting the affected web pages. This can lead to partial confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, exploitation requires user interaction and elevated privileges to inject the payload. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the widget configuration to trusted administrators only and monitor for suspicious input. Avoid deploying the vulnerable widget in untrusted environments if possible.