The vulnerability CVE-2024-51921 affects the midori scrollup product through version 1.1. It is a DOM-based Cross-site Scripting (XSS) issue caused by improper neutralization of input during web page generation. The CVSS 3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality, integrity, and availability at a low level. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

Successful exploitation of this vulnerability could allow an attacker with limited privileges and requiring user interaction to execute arbitrary scripts in the victim's browser context, potentially leading to information disclosure, manipulation of web content, or disruption of availability. The impact is rated as medium severity with low confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation or output encoding workarounds if feasible. Monitor vendor channels for updates and apply patches promptly once available.