This vulnerability (CVE-2024-49637) affects the Foxskav Bet WC 2018 Russia product through improper input neutralization during web page generation, resulting in a reflected cross-site scripting (XSS) flaw. The affected versions include all releases up to 2.1. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability. The vulnerability allows attackers to execute arbitrary scripts in users' browsers when they visit crafted URLs or web pages, potentially leading to session hijacking, data manipulation, or denial of service effects. No official patch or fix has been documented yet.

Successful exploitation of this reflected XSS vulnerability can lead to partial compromise of confidentiality, integrity, and availability of affected users' sessions or data within the context of the vulnerable web application. Attackers may execute arbitrary scripts in victims' browsers, potentially stealing sensitive information or disrupting service. However, no known exploits have been reported in the wild as of the publication date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should exercise caution with untrusted input and consider implementing web application firewall (WAF) rules to detect and block reflected XSS attempts. Avoid clicking on suspicious links that may exploit this vulnerability.