The vulnerability CVE-2024-49239 affects the 'Add Categories Post Footer' WordPress plugin by nikhilvaghela. It is a reflected cross-site scripting (XSS) issue caused by improper input sanitization during web page generation. This flaw allows attackers to inject malicious scripts that execute in the context of users visiting affected pages. The issue impacts versions up to and including 2.2.2. There is no available CVSS score or patch information at this time, and no known active exploitation has been reported.

Successful exploitation of this reflected XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of a victim's browser, potentially leading to session hijacking, defacement, or redirection to malicious sites. However, no known exploits in the wild have been reported, and the impact depends on the attacker's ability to lure users to crafted URLs or pages.

Patch status is not yet confirmed — check the vendor advisory or plugin updates for current remediation guidance. Until a fix is available, users should consider disabling or removing the affected plugin to mitigate risk. No official fix or temporary workaround has been published by the vendor as of now.