The vulnerability CVE-2025-30924 affects Primer MyData for Woocommerce before version 4.2.4 and involves improper input neutralization leading to reflected cross-site scripting. This allows attackers to inject malicious scripts into web pages generated by the application, potentially impacting confidentiality, integrity, and availability. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The vulnerability is classified as high severity due to its potential impact on data confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to information disclosure, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability of user data. The CVSS score of 7.1 reflects these impacts. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or advisory is provided, users should monitor for updates from primersoftware and apply any released fixes promptly. Until a patch is available, consider limiting exposure by restricting access or employing web application firewalls that can detect and block reflected XSS attempts.