CVE-2024-11447 is a reflected Cross-Site Scripting vulnerability in the Community by PeepSo WordPress plugin, affecting all versions up to 7.0.3.0. The vulnerability is due to improper neutralization of input in the 'filter' parameter, enabling unauthenticated attackers to inject and execute arbitrary web scripts in the context of the victim's browser session. This can occur when a user is tricked into clicking a crafted link. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) reflects network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity without availability impact.

Successful exploitation allows an unauthenticated attacker to execute arbitrary scripts in the context of a victim's browser, potentially leading to information disclosure and integrity impacts such as session hijacking or content manipulation. There is no direct impact on system availability. The vulnerability requires user interaction and affects confidentiality and integrity at a low level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and links involving the 'filter' parameter in the affected plugin. Monitoring vendor channels for updates is recommended.