CVE-2024-44022 describes a stored cross-site scripting vulnerability in Trustmary's Review & testimonial widgets (versions up to 1.0.5). The vulnerability is due to improper neutralization of input during web page generation, which can allow an attacker with limited privileges and requiring user interaction to inject malicious scripts. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with impact on confidentiality, integrity, and availability rated as low to low to low respectively, resulting in an overall medium severity score of 6.5. No patch or official remediation information is provided in the available data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium impact level. No known exploits in the wild have been reported, and the vulnerability requires some level of privilege and user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting privileges and exercising caution with user-generated content in the affected widgets. Monitor vendor communications for updates on patches or official mitigations.