CVE-2024-47650 is a stored cross-site scripting vulnerability in the WP-WebAuthn plugin by Axton, affecting versions up to 1.3.1. It results from improper input neutralization during web page generation, enabling attackers to inject malicious scripts that persist and execute when other users access the affected content. The CVSS 3.1 base score is 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L), reflecting network attack vector, low attack complexity, required privileges, and user interaction with partial impact on confidentiality, integrity, and availability. No patch or remediation details are provided in the available data.

Successful exploitation of this vulnerability could allow an attacker with low privileges and requiring user interaction to execute stored malicious scripts in the context of other users, potentially leading to partial compromise of confidentiality, integrity, and availability of affected systems or data. However, no known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting plugin usage to trusted users and monitor for suspicious activity related to stored content. Avoid exposing the plugin to untrusted users where possible.