CVE-2024-4859: Stored Cross-Site Scripting in Solidus e-commerce platform. This vulnerability exists in versions 4.3.4 and earlier, specifically within the order tracking URL functionality, enabling attackers to inject malicious scripts. Although the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 30 and it is tagged as "In The Wild" indicating active exploitation attempts, underscoring the need for awareness. Successful exploitation can lead to user session hijacking, data theft, or website defacement. While the SVRS suggests lower severity, the 'In The Wild' tag warrants careful consideration and monitoring as attackers are actively exploiting the flaw. Addressing this XSS vulnerability is crucial to protect sensitive customer information and maintain the integrity of the Solidus e-commerce platform. Immediate patching or mitigation steps are advised to prevent potential security breaches.