This vulnerability (CVE-2024-32790) in the Pricing Table by Supsystic plugin is classified as CWE-80, indicating improper neutralization of script-related HTML tags in a web page. This flaw allows an attacker with low privileges to inject code via the plugin, potentially leading to reflected or stored XSS attacks. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability affects versions up to 1.9.12, with no known exploits in the wild and no vendor-provided patch or official remediation at this time.

The vulnerability allows code injection through improper sanitization of HTML tags, which can lead to cross-site scripting attacks. The impact is limited to integrity as per the CVSS vector, with no direct confidentiality or availability impact reported. Exploitation requires low privileges but no user interaction, making it moderately accessible to attackers with some access to the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting access to the affected plugin and monitor for updates from Supsystic. No vendor advisory or patch links are currently available, so no official remediation steps can be recommended beyond standard cautious use.