CVE-2024-29116 is a reflected cross-site scripting (XSS) vulnerability classified under CWE-79 in the WooThumbs for WooCommerce plugin by IconicWP. The issue is caused by improper neutralization of input during web page generation, which can lead to execution of arbitrary scripts in the context of the affected web application. This vulnerability affects all versions up to and including 5.5.3. The CVSS v3.1 base score is 7.1, with attack vector network, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability rated as low to low to low respectively. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The reflected nature of the XSS requires user interaction. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying temporary mitigations such as input validation or disabling the affected plugin if feasible. Monitor official IconicWP channels for updates and apply patches promptly once released.