The vulnerability CVE-2024-47624 affects bannersky BSK Forms Blacklist (up to version 3.8.1) and is classified as a reflected cross-site scripting (XSS) issue. It occurs due to improper neutralization of input during web page generation, which allows attackers to inject and execute arbitrary scripts in the context of users interacting with the affected component. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to theft of user data, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability to a limited extent. The CVSS score of 7.1 indicates a high severity level with partial impact on system security properties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying web application firewall (WAF) rules to detect and block reflected XSS attempts or implement input validation and output encoding as temporary mitigations. Monitor vendor communications for updates on patches or official fixes.