This vulnerability (CVE-2024-34790) involves improper input sanitization in the ImageMagick Sharpen Resized Images product, leading to stored cross-site scripting (CWE-79). An attacker could inject malicious scripts that are stored and later executed in the context of a user's browser. The issue affects versions through 1.1.7. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of affected users' browsers. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, the medium CVSS score and requirement for high privileges and user interaction reduce the overall risk severity. No known active exploitation has been reported.

No official patch or remediation is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should limit exposure by restricting access to the affected component to trusted users with high privileges and educate users to avoid interacting with untrusted content. Monitor vendor channels for updates and apply patches promptly once available.