CVE-2024-50471 describes a DOM-based Cross-site Scripting vulnerability in checklistcom Trip Plan (versions <= 1.0.10). The issue is caused by improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts into the client-side environment. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system. The vulnerability requires network access, low attack complexity, privileges, and user interaction. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to information disclosure, modification of data, or disruption of application availability. The impact is rated medium with limited confidentiality, integrity, and availability loss. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider applying temporary mitigations such as input validation or content security policies if feasible.