CVE-2024-34424 is a CWE-79 stored cross-site scripting vulnerability in the iePlexus Featured Content Gallery plugin (up to version 3.2.0). It results from improper input neutralization during web page generation, enabling attackers with high privileges to inject malicious scripts that execute in the context of other users. The vulnerability has a CVSS 3.1 score of 5.9, reflecting medium severity with impacts on confidentiality, integrity, and availability. No official fix or remediation guidance is currently available, and no known active exploitation has been reported.

Successful exploitation could allow an attacker with high privileges to inject and store malicious scripts that execute when other users view the affected content. This can lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, exploitation requires user interaction and elevated privileges, limiting the ease of attack. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to users with high privileges and limit exposure to untrusted input in the Featured Content Gallery. Monitor vendor channels for updates and apply patches promptly once released.