CVE-2024-34805 describes a stored Cross-site Scripting (XSS) vulnerability in the Webvitaly iFrame product (up to version 5.0). The vulnerability arises from improper neutralization of input during web page generation, classified under CWE-79. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, requiring low privileges and user interaction, and impacting confidentiality, integrity, and availability with low to low impact levels. No patch or official remediation level has been provided by the vendor, and the product is not a cloud service.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to information disclosure, modification of data, or disruption of service. The impact is rated medium based on the CVSS score of 6.5, indicating limited but notable confidentiality, integrity, and availability impacts. There are no reports of known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation or output encoding workarounds if possible and restrict privileges to limit potential impact. Monitor vendor communications for updates on patches or official mitigations.