CVE-2024-51589 describes a DOM-based Cross-site Scripting vulnerability in the wpcirqle Bigmart Elements plugin for WordPress, affecting versions up to 1.0.3. The issue stems from improper neutralization of input during web page generation, which can allow an attacker to inject and execute arbitrary scripts in the victim's browser. The vulnerability has a CVSS 3.1 base score of 6.5, reflecting network attack vector, low attack complexity, required privileges of low, user interaction required, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected user's browser, potentially leading to partial loss of confidentiality, integrity, and availability of data accessible to the user. The attack requires user interaction and low privileges. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider limiting user input or employing web application firewalls that can detect and block XSS payloads relevant to this plugin. Monitor vendor channels for updates regarding patches or official mitigations.