The vulnerability CVE-2024-54360 affects the Gutensee product by premila and is classified as a DOM-based Cross-site Scripting (XSS) issue. It arises from improper neutralization of input during web page generation, which can be exploited to inject malicious scripts into the client-side environment. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, requiring privileges and user interaction, and impacts on confidentiality, integrity, and availability. The affected versions include all releases up to 1.0.6. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to data disclosure, modification, or disruption of service. The impact is rated medium based on the CVSS score and the requirement for privileges and user interaction. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying input validation or output encoding workarounds if feasible. Monitor for updates from the vendor premila regarding patches or official mitigations.