CVE-2024-31929 describes a cross-site scripting vulnerability in the Intagrate Lite WordPress plugin (versions ≤ 1.3.7). The issue stems from improper input neutralization during web page generation, enabling attackers with high privileges and requiring user interaction to execute scripts that could affect confidentiality, integrity, and availability to a limited extent. The vulnerability is network exploitable with low attack complexity but requires privileges and user interaction. No official patch or vendor advisory is currently available, and no known exploits have been reported.

An attacker with high privileges on the affected system could exploit this vulnerability to execute malicious scripts in the context of the affected web application, potentially leading to limited compromise of confidentiality, integrity, and availability. The attack requires user interaction and privileges, which limits the scope of impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, limit user privileges to reduce risk and avoid interacting with untrusted content within the affected plugin. Monitor vendor channels for updates regarding a fix.