The vulnerability CVE-2024-34437 in Form Maker by 10Web is a stored XSS issue caused by improper input sanitization during web page generation. It affects all versions up to 1.15.24. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, high privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low and low respectively. No patch or official fix has been announced, and no known active exploitation has been reported.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of the affected application, potentially leading to partial confidentiality, integrity, and availability impacts. However, the attack complexity and required privileges reduce the likelihood of widespread exploitation. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit high-privilege access to the affected plugin and exercise caution with user inputs. Monitor vendor communications for updates on patches or mitigations.