CVE-2024-37552 is a stored cross-site scripting (XSS) vulnerability classified under CWE-79 in the Inisev Social Media & Share Icons plugin. The issue arises from improper neutralization of input during web page generation, allowing malicious scripts to be stored and executed in the context of affected web pages. The vulnerability affects versions up to 2.9.1. The CVSS v3.1 base score is 5.9, reflecting medium severity with network attack vector, low attack complexity, high privileges required, and user interaction needed. The impact includes limited confidentiality, integrity, and availability loss. No patch or official remediation level has been published yet.

Successful exploitation of this vulnerability could allow an attacker with high privileges to inject and store malicious scripts that execute when other users view affected pages. This can lead to limited disclosure of information, modification of data, or disruption of service. However, exploitation requires user interaction and elevated privileges, which reduces the overall risk. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit administrative access to trusted users and monitor for suspicious activity related to the plugin. Avoid exposing the plugin to untrusted users or inputs. Follow vendor channels for updates on patches or official mitigations.