The vulnerability identified as CVE-2024-9147 affects Bna Informatics PosPratik versions prior to 3.2.1. It is categorized as CWE-80, indicating improper neutralization of script-related HTML tags in a web page, leading to a basic cross-site scripting (XSS) vulnerability. This issue allows attackers to inject malicious scripts through HTTP query strings, potentially enabling script execution in users' browsers. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on confidentiality and availability. No patch or official remediation level has been published by the vendor, and the product is not a cloud service. No known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to limited confidentiality and availability impacts. The CVSS vector indicates no impact on integrity or system control, and the attack does not require user interaction or privileges. There are no known exploits in the wild, suggesting limited active threat at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users of Bna Informatics PosPratik should monitor vendor communications for updates. Until a patch is available, consider applying input validation or output encoding on HTTP query strings to mitigate XSS risks if feasible.