The vulnerability identified as CVE-2024-30545 affects the Social Author Bio plugin by Nick Powers. It is a CSRF issue that enables stored XSS attacks, impacting versions through 2.4. The CVSS v3.1 score is 7.1 (High), indicating network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or official fix has been published yet, and the vendor has not provided remediation details. The vulnerability is publicly disclosed but not known to be exploited in the wild.

Successful exploitation can allow an attacker to execute stored XSS via CSRF, potentially leading to unauthorized actions performed on behalf of authenticated users and compromise of user data confidentiality, integrity, and availability. The impact is rated high due to the combination of CSRF and stored XSS, which can facilitate persistent malicious script execution in victims' browsers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the affected plugin and apply any available security controls such as CSRF protections or web application firewalls that might mitigate exploitation. Monitor vendor communications for updates on patches or official mitigations.