This vulnerability (CVE-2024-34765) in Sensei Pro (WC Paid Courses) is a stored cross-site scripting (XSS) issue caused by improper input neutralization during web page generation. It affects all versions up to 4.23.1.1.23.1. The vulnerability allows an attacker with low privileges and requiring user interaction to inject malicious scripts, potentially impacting confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 6.5, reflecting medium severity. No official patch or remediation level has been published by the vendor, and no known exploits have been reported.

Successful exploitation of this stored XSS vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected application. An attacker could execute arbitrary scripts in the context of the victim user, potentially leading to session hijacking, unauthorized actions, or data manipulation. However, exploitation requires user interaction and low privileges, which limits the scope of impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted input and consider applying any available temporary mitigations recommended by the vendor or security community. Monitor vendor channels for updates regarding patches or official workarounds.