This vulnerability (CVE-2024-31120) in wpdevart Responsive Image Gallery, Gallery Album plugin is a stored cross-site scripting (CWE-79) issue caused by improper input sanitization during web page generation. It affects all versions up to 2.0.3. The CVSS 3.1 score is 6.5 (medium severity), indicating an attacker with network access and low privileges can exploit it with user interaction, potentially impacting confidentiality, integrity, and availability in a limited manner. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could allow an attacker to inject malicious scripts that execute in the context of users viewing the affected gallery pages. This may lead to limited confidentiality, integrity, and availability impacts as indicated by the CVSS vector. However, exploitation requires user interaction and low privileges, reducing the overall risk. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the affected plugin or disabling it if feasible. Monitor official wpdevart channels for updates and apply patches promptly once released.