CVE-2024-39631 is a cross-site scripting vulnerability in Contest Gallery up to version 23.1.2 caused by improper input neutralization during web page generation. This allows attackers to inject malicious scripts that execute in users' browsers, potentially leading to data disclosure, manipulation, or denial of service. The vulnerability has a CVSS 3.1 base score of 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, scope change, and partial impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no exploits are known in the wild.

Successful exploitation could allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to partial disclosure of information, modification of data, and disruption of service within the affected Contest Gallery application. The vulnerability affects confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should apply best practices for input validation and sanitization where possible and limit exposure to untrusted input. Monitor official channels for updates and apply patches promptly once released.