The vulnerability CVE-2024-51840 in the rezaul Wd-image-magnifier-xoss plugin arises from improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. This affects versions up to 1.0. The CVSS 3.1 base score is 6.5 (medium severity), with an attack vector of network, low attack complexity, requiring privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No patch or vendor advisory is currently available, and no known exploitation has been reported.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to execute arbitrary scripts in the victim's browser, potentially leading to information disclosure, modification of web content, or disruption of availability. The impact is rated medium based on the CVSS score of 6.5, reflecting limited but meaningful confidentiality, integrity, and availability impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting exposure by restricting privileges and user interaction where possible. Monitor for updates from the vendor or trusted security sources regarding patches or mitigations.