CVE-2024-37523 is a stored cross-site scripting (XSS) vulnerability classified under CWE-79 in the AMP-MODE Login Logo Editor component. This vulnerability arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in the context of the affected application. It affects versions up to 1.3.3. The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, low attack complexity, high privileges required, and user interaction needed. The impact includes limited confidentiality, integrity, and availability loss. No patch or official remediation is currently documented.

Successful exploitation of this stored XSS vulnerability could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of the affected application. This may lead to limited disclosure of information, modification of data, or disruption of service within the scope of the application. However, the impact is constrained by the requirement for high privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with high-privilege accounts and limit exposure to untrusted input in the Login Logo Editor. Monitor vendor channels for updates regarding patches or mitigations.