This vulnerability (CVE-2024-29110) in Pauple's Table & Contact Form 7 Database – Tablesome plugin is a reflected Cross-site Scripting (CWE-79) issue caused by improper input neutralization during web page generation. It affects versions through 1.0.27 and has a CVSS 3.1 base score of 7.1, indicating high severity. The vulnerability allows an attacker to inject malicious scripts that execute in the context of a user's browser, potentially leading to data disclosure, manipulation, or denial of service. No vendor advisory or patch is currently available, and the plugin is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of a victim's browser, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). There are no known exploits in the wild, so active exploitation has not been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently available, users should monitor for vendor updates and avoid exposing vulnerable plugin interfaces to untrusted users. No vendor advisory content indicates that the issue is already mitigated or requires no action.