The vulnerability CVE-2024-34375 in WPPOOL Sheets To WP Table Live Sync is a stored cross-site scripting (CWE-79) issue caused by improper input neutralization during web page generation. It affects versions through 3.7.0 of the plugin. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation has been disclosed as of the publication date.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. The requirement for user interaction and high privileges reduces the overall risk. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit high-privilege user access and exercise caution with user input handling in the affected plugin. Monitor vendor communications for updates on patches or mitigations.