This vulnerability (CVE-2025-24735) in Chatra Live Chat + ChatBot + Cart Saver is a stored cross-site scripting (CWE-79) issue caused by improper input neutralization during web page generation. It affects all versions up to 1.0.11. The CVSS 3.1 base score is 7.7 (high), with network attack vector, low attack complexity, requiring low privileges and no user interaction. The impact scope is changed (S:C), with no confidentiality or integrity impact but high availability impact. No patch or official remediation information is currently available.

Exploitation of this vulnerability allows an attacker to inject and store malicious scripts that execute in the context of users' browsers interacting with the Chatra product. This can lead to denial of service conditions. There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting privileges required to access the vulnerable functionality and monitor for suspicious activity related to stored scripts. Avoid deploying the affected versions in sensitive environments if possible.