This vulnerability (CVE-2024-4214) is classified as CWE-80, indicating improper neutralization of script-related HTML tags in a web page, leading to a basic cross-site scripting (XSS) issue in the Bill Minozzi Car Dealer product. It affects versions up to 4.15. The CVSS v3.1 base score is 2.7, reflecting a low severity with network attack vector, low attack complexity, required privileges at high level, no user interaction, and impact limited to integrity only. No official patch or remediation guidance is currently available, and no exploits have been observed in the wild.

The impact is limited to integrity, meaning an attacker with high privileges could inject script code into the web pages, potentially altering content or behavior. There is no impact on confidentiality or availability. The low CVSS score and requirement for high privileges reduce the overall risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict high-privilege access to the affected application and monitor for suspicious activity related to script injection. Avoid exposing the vulnerable interface to untrusted users.