The vulnerability CVE-2024-51609 in the Emoji Shortcode plugin by Aakif Kadiwala is a stored cross-site scripting (XSS) issue caused by improper neutralization of input during web page generation. This allows attackers to inject malicious scripts that persist and execute when other users access the affected content. The issue affects versions up to 1.0.0. The CVSS 3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No patch or remediation details are currently available.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users viewing the affected pages, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium severity impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit exposure by restricting input sources and applying any available security controls that can mitigate stored XSS risks. Monitor for updates from the vendor or trusted security sources.