The vulnerability CVE-2024-51878 exists in the strailejoey AchillesTheme-shortcodes plugin (version 0.1 and earlier) where improper neutralization of input during web page generation leads to a DOM-based cross-site scripting (XSS) issue. This allows an attacker with low privileges and requiring user interaction to potentially execute arbitrary scripts in the context of the affected web application, impacting confidentiality, integrity, and availability to a limited extent. The CVSS v3.1 base score is 6.5, indicating medium severity.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to limited disclosure or modification of data and some disruption of service. The impact affects confidentiality, integrity, and availability but is limited by the requirement for user interaction and low privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users should monitor the vendor's communications for updates and consider applying any future patches promptly. Until a fix is available, cautious handling of user input and limiting exposure of the affected plugin may reduce risk.