This vulnerability (CVE-2024-22163) is a stored cross-site scripting (CWE-79) issue in Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin, affecting versions through 18.5.7. It results from improper input neutralization during web page generation, enabling attackers to inject and store malicious scripts that execute in the context of users' browsers. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No official patch or remediation guidance has been published yet.

Successful exploitation can lead to execution of arbitrary scripts in the context of the affected web application, potentially compromising user data confidentiality, integrity, and availability. This can result in session hijacking, defacement, or other malicious actions performed by the attacker via the victim's browser. The vulnerability is rated high severity with a CVSS score of 7.1. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with input handling and consider temporary mitigations such as disabling or limiting the plugin's functionality if feasible. Monitor vendor communications for updates on patches or official mitigations.