This vulnerability (CVE-2024-7835) affects the Exnet Informatics Software Ferry Reservation System and is classified as CWE-79, indicating improper neutralization of input leading to reflected Cross-site Scripting (XSS). The issue allows an attacker to inject malicious scripts into web pages generated by the system, potentially impacting users who visit crafted URLs or interact with vulnerable web components. The CVSS 4.0 base score is 8.8, reflecting a high severity with network attack vector, no privileges or user interaction required, and high impact on confidentiality and availability. The affected versions are those before 240805-002. No patch or official remediation level has been published as of the current data.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to theft of user credentials, session hijacking, or other malicious actions impacting confidentiality and availability. The vulnerability does not require user interaction or privileges, increasing its risk. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying web application firewall (WAF) rules to detect and block reflected XSS attempts and avoid exposing the vulnerable system to untrusted inputs. Monitor vendor communications for updates on patches or official mitigations.