CVE-2024-47947 is a stored cross-site scripting (XSS) vulnerability in the "Edit Disclaimer Text" function of a web-based configuration menu. This function is accessible only to users with Poweruser or Admin privileges. The vulnerability allows an attacker to inject arbitrary JavaScript code that executes whenever the ScanWizard interface is loaded, including in Kiosk-mode browsers.