CVE-2024-50501 is a DOM-based Cross-site Scripting vulnerability in Climax Themes Kata Plus affecting versions up to and including 1.4.7. The issue arises from improper neutralization of input during web page generation, which can be exploited to execute malicious scripts in the context of the victim's browser. The vulnerability requires network access, low complexity, low privileges, and user interaction, and it impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to partial disclosure of information, modification of data, or disruption of service. The CVSS score of 6.5 reflects a medium severity with limited but meaningful impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is available at this time. Users should monitor for updates from Climax Themes and apply any official fixes once released. Until then, consider limiting exposure by restricting user input or employing web application firewalls that can detect and block XSS payloads.