The vulnerability CVE-2024-52477 in docxpresso Document & Data Automation is a CSRF issue that enables Stored XSS attacks. It affects all versions up to 1.6.1. The CVSS score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or official remediation details are provided in the available data.

Successful exploitation could allow an attacker to execute stored cross-site scripting payloads via CSRF, potentially leading to unauthorized actions performed with the privileges of an authenticated user. This can compromise confidentiality, integrity, and availability of the affected system. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as validating anti-CSRF tokens and restricting actions to trusted users. Monitor vendor channels for updates.