CVE-2024-47379 affects Shamalli Web Directory Free (<= 1.7.3) and involves improper neutralization of input during web page generation, resulting in a reflected cross-site scripting (XSS) vulnerability. This vulnerability allows an attacker to inject malicious scripts that execute when a victim interacts with a crafted URL or input, potentially leading to partial compromise of confidentiality, integrity, and availability. The CVSS v3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and low impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation of this reflected XSS vulnerability can allow an attacker to execute arbitrary scripts in the context of the victim's browser session. This may lead to partial disclosure of sensitive information, modification of web content, or disruption of availability. The CVSS score of 7.1 indicates a high severity with impacts on confidentiality, integrity, and availability, though these impacts are rated as low individually. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying web application firewall (WAF) rules to detect and block reflected XSS attempts and avoid exposing vulnerable versions to untrusted users. Monitor vendor channels for updates and apply patches promptly once available.