CVE-2024-50407 is a reflected Cross-site Scripting vulnerability in Namaste! LMS (versions ≤ 2.6.2) caused by improper neutralization of input during web page generation. This flaw allows attackers to inject malicious scripts that execute in users' browsers when they visit crafted URLs or pages, potentially leading to partial compromise of confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed.

Successful exploitation of this vulnerability can result in partial loss of confidentiality, integrity, and availability of the affected system or user data due to execution of malicious scripts in the victim's browser context. This may enable actions such as session hijacking, defacement, or other unauthorized activities within the LMS environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying web application firewalls or input validation controls to mitigate reflected XSS risks. Avoid clicking on suspicious links and educate users about the risk of interacting with untrusted URLs.