CVE-2024-34335 identifies a reflected cross-site scripting (XSS) vulnerability in ORDAT FOSS-Online prior to version 2.24.01. The vulnerability exists on the login page, where user-supplied input is not properly sanitized, allowing attackers to inject and execute arbitrary scripts in the victim's browser. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but requires user interaction. The vulnerability impacts confidentiality and integrity but not availability. There is no vendor advisory or patch information provided, so patch status is unknown.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a user's session, potentially leading to information disclosure or manipulation of user interactions. The CVSS score of 6.1 reflects a medium severity impact affecting confidentiality and integrity. There is no indication of availability impact or known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with the login page and consider implementing web application firewall (WAF) rules or input validation controls to mitigate reflected XSS risks.