CVE-2024-1596 is a stored cross-site scripting vulnerability in the SaturdayDrive Ninja Forms - File Uploads WordPress plugin. The issue is due to improper neutralization of input during web page generation, specifically insufficient sanitization and escaping of uploaded file content (e.g., RTX files). This flaw allows unauthenticated attackers to inject arbitrary web scripts that execute in the context of users viewing the injected pages. The vulnerability affects all plugin versions up to 3.3.16 and has a CVSS 3.1 base score of 7.2 (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality and integrity with scope change.

Successful exploitation enables an unauthenticated attacker to perform stored cross-site scripting attacks, potentially leading to the execution of arbitrary scripts in users' browsers. This can result in theft of sensitive information, session hijacking, or other malicious actions impacting confidentiality and integrity. There is no indication of availability impact. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or restricting file upload functionality in the Ninja Forms - File Uploads plugin to prevent exploitation. Monitor official SaturdayDrive or WordPress security advisories for updates and apply patches promptly once available.