The vulnerability CVE-2024-51835 affects the ajinkyanahar OpenCart Product Display plugin (versions up to 1.0) and is classified as a stored cross-site scripting (XSS) flaw. It results from improper neutralization of input during web page generation, enabling attackers with low privileges to inject malicious scripts that execute when other users view the affected pages. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation guidance has been provided by the vendor or maintainers as of the published date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users viewing the affected product display pages. This may lead to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, exploitation requires user interaction and low privileges, which limits the attack scope. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected plugin and carefully validate or sanitize inputs related to product display content. Monitoring for updates from the vendor or security advisories is recommended to apply any forthcoming patches promptly.