CVE-2024-34574 is a CWE-79 (Improper Neutralization of Input During Web Page Generation) vulnerability affecting Wpsoul Table Maker up to version 1.9.1. It allows an attacker with high privileges and requiring user interaction to inject and store malicious scripts that execute when other users view the affected pages. The vulnerability is network exploitable with low attack complexity but requires privileges and user interaction. The impact includes limited confidentiality, integrity, and availability loss. No patch or official remediation level has been disclosed by the vendor.

Successful exploitation of this vulnerability can lead to stored cross-site scripting attacks, which may allow an attacker to execute arbitrary scripts in the context of other users. This can result in limited disclosure of information, modification of data, or disruption of service. The CVSS score of 5.9 reflects a medium severity impact with partial loss of confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should apply strict input validation and sanitization where possible and limit privileges to reduce risk. Monitor vendor channels for updates regarding patches or official mitigations.