CVE-2024-32553 describes a cross-site scripting vulnerability in the looks_awesome Superfly Menu plugin (versions <= 5.0.25). The vulnerability is due to improper neutralization of input during web page generation, enabling an attacker with low privileges to inject malicious code that could impact availability and integrity. The CVSS score is 7.1 (high), with network attack vector, low attack complexity, no user interaction required, and privileges required at a low level. No patch or vendor advisory is currently provided.

The vulnerability allows an attacker with low privileges to perform cross-site scripting attacks, potentially leading to integrity and availability impacts on affected systems. Confidentiality impact is not indicated. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the plugin and monitoring for suspicious activity related to Superfly Menu. Avoid exposing the plugin to untrusted users where possible.