CVE-2024-50502 is a DOM-based cross-site scripting vulnerability in CozyThemes Cozy Blocks cozy-addons affecting versions up to and including 2.0.18. The issue arises from improper neutralization of input during web page generation, allowing an attacker with low privileges and requiring user interaction to execute malicious scripts in the context of the affected application. The CVSS 3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to execution of arbitrary scripts in the victim's browser, potentially resulting in partial disclosure of sensitive information, modification of data, or disruption of service within the context of the Cozy Blocks application. The attack requires user interaction and low privileges, limiting the scope somewhat but still posing a risk to affected users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted input and consider applying any available temporary mitigations recommended by CozyThemes. Monitoring vendor communications for updates is advised.