The vulnerability CVE-2024-51644 affects samwilson Addressbook versions up to 1.1.3 and is characterized by a Cross-Site Request Forgery (CSRF) issue that enables Stored Cross-Site Scripting (XSS). The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. The impact includes partial loss of confidentiality, integrity, and availability. No patch or remediation information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow an attacker to execute unauthorized requests on behalf of an authenticated user, leading to stored XSS attacks. This can result in partial compromise of confidentiality, integrity, and availability of the application data and user sessions. The vulnerability is rated high severity with a CVSS score of 7.1. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens and input validation to mitigate the risk. Monitoring for unusual activity related to stored XSS may also help detect exploitation attempts.