The vulnerability CVE-2024-2702 in Olive Themes Olive One Click Demo Import is classified as CWE-862 (Missing Authorization). It allows an attacker without privileges to import settings and data through the plugin, which can result in an XSS condition. The CVSS 3.1 base score is 8.2, indicating a high severity with network attack vector, no privileges required, no user interaction, and impacts integrity and availability. The affected versions include all up to 1.1.1. There is currently no vendor advisory or patch available for this issue.

Exploitation of this vulnerability can lead to unauthorized import of settings and data, which may cause cross-site scripting (XSS). This can compromise the integrity of the affected system and potentially disrupt availability. The vulnerability does not directly impact confidentiality according to the CVSS vector. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Olive One Click Demo Import plugin to trusted users only and monitor for suspicious activity related to import functionality. Avoid exposing this plugin to untrusted networks or users.