This vulnerability (CVE-2024-53773) involves improper neutralization of input in the pracapl Znajdź Pracę z Praca.pl application, leading to a DOM-Based Cross-site Scripting (XSS) issue. It affects versions up to 2.2.3 and allows an attacker with low privileges and requiring user interaction to potentially execute scripts that impact confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 base score is 6.5, reflecting medium severity with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability. No patch or official remediation information is provided.

Successful exploitation of this DOM-Based XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser session, potentially leading to limited disclosure of information, modification of data, or disruption of service. The attack requires user interaction and low privileges, and the impact is rated as medium severity with partial confidentiality, integrity, and availability impacts. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider implementing web application firewall (WAF) rules or input validation as temporary mitigations. Monitor vendor communications for updates on patches or official fixes.