The vulnerability CVE-2024-50520 affects the Ancient World Linked Data WordPress plugin by Peter J. Herrel. It arises from improper neutralization of input during web page generation, resulting in a DOM-based cross-site scripting (XSS) issue. This affects versions from initial release through 0.2.1. The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability to a low extent. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation of this vulnerability could allow an attacker with some privileges and requiring user interaction to execute malicious scripts in the context of the affected web application. This can lead to partial compromise of confidentiality, integrity, and availability of the system or user data. However, the impact is limited by the need for privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the vendor or trusted security sources. Until a fix is available, consider limiting privileges and user interactions with the affected plugin to reduce risk.