CVE-2024-44779 is a reflected XSS vulnerability affecting vTiger CRM version 7.4.0. The issue arises from improper sanitization of the viewname parameter on the index page, enabling attackers to inject arbitrary code that executes in the victim's browser context. This can lead to script execution impacting the integrity of user interactions. The vulnerability is rated high severity with a CVSS 3.1 score of 7.4, indicating network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, no confidentiality impact, high integrity impact, and no availability impact. There is no vendor advisory or patch information available at this time.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to unauthorized actions performed on behalf of the user or theft of session data. The integrity of user interactions with the application can be compromised. There is no direct impact on confidentiality or availability reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when clicking on links involving the viewname parameter and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts targeting this parameter.