CVE-2024-52482 describes a reflected cross-site scripting vulnerability in rafalautopilot Ortto versions up to 1.0.19. The issue is caused by improper neutralization of user input during web page generation, which allows attackers to inject malicious scripts that are reflected to users. This can lead to impacts on confidentiality, integrity, and availability as indicated by the CVSS vector. The vulnerability is rated high severity with a CVSS score of 7.1. No patch or official fix information is provided in the available data, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed, with low confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. In the meantime, consider applying input validation or output encoding workarounds if feasible to mitigate reflected XSS risks.