The vulnerability CVE-2024-51892 affects the Noor Alam Sell Media File with Stripe plugin (versions up to 1.0.6) and is classified as a stored cross-site scripting (XSS) issue. It results from improper neutralization of input during web page generation, which can allow an attacker to inject and store malicious scripts that execute when viewed by other users. The attack vector requires network access with low privileges and user interaction, and the vulnerability impacts confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 base score is 6.5, reflecting medium severity. There is no indication of an official patch or vendor advisory at this time, and no known active exploitation has been reported.

Successful exploitation of this stored XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of users viewing the affected web pages, potentially leading to limited confidentiality, integrity, and availability impacts. The attacker requires low privileges and user interaction to trigger the vulnerability. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting exposure by restricting access to the affected plugin and monitoring for suspicious activity related to XSS. Avoid relying on generic mitigations unless specifically recommended by the vendor.