CVE-2024-48041 is a stored cross-site scripting vulnerability in CreativeMindsSolutions CM Tooltip Glossary (versions <= 4.3.9). It results from improper input neutralization during web page generation, enabling attackers with low privileges to inject malicious scripts that execute when other users view the affected content. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, user interaction, and partial impact on confidentiality, integrity, and availability.

Successful exploitation can allow an attacker to execute arbitrary scripts in the context of users viewing the affected pages, potentially leading to partial disclosure of information, modification of data, or disruption of availability. The impact is limited by the need for low privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting privileges for users who can input content and be cautious with content that is displayed to others. Monitor vendor channels for updates and apply patches promptly once available.