CVE-2024-1379 is a stored cross-site scripting vulnerability in the Website Article Monetization By MageNet WordPress plugin affecting all versions up to 1.0.11. The vulnerability is due to improper neutralization of input in the 'abp_auth_key' parameter, which lacks sufficient sanitization and output escaping, combined with a missing authorization check. This allows unauthenticated attackers to inject arbitrary web scripts that execute when users visit the compromised pages. The vulnerability has a CVSS 3.1 base score of 6.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and partial confidentiality and integrity impact.

Successful exploitation enables unauthenticated attackers to inject and execute arbitrary scripts in the context of users visiting the affected pages, potentially leading to theft of user credentials, session hijacking, or other malicious actions impacting confidentiality and integrity. Availability is not affected. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or removing the vulnerable plugin to prevent exploitation. Monitor vendor channels for updates and apply any released patches promptly.