CVE-2024-7873 is a critical vulnerability in Veribilim Software's Veribase Order before version 4.010.3 caused by improper neutralization of input during web page generation. This includes inadequate encoding or escaping of output and improper handling of script content in HTML attributes, leading to stored Cross-Site Scripting (XSS). The vulnerability enables attackers to inject and execute malicious scripts, including via HTTP headers and script-based APIs, potentially compromising user sessions or data. The CVSS 4.0 score of 9.4 reflects high impact and ease of exploitation over the network without authentication. No patch or official remediation information is currently available from the vendor.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary scripts in the context of affected users' browsers, potentially leading to session hijacking, data theft, or other malicious actions. The vulnerability affects all versions of Veribase Order prior to 4.010.3. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor Veribilim Software's advisories closely and plan to upgrade to version 4.010.3 or later once available. Until then, consider applying web application firewall (WAF) rules to detect and block XSS attempts if feasible.