The vulnerability CVE-2024-51940 affects the WP Responsive Video plugin by Sohelwpexpert. It is a DOM-based Cross-site Scripting (XSS) issue caused by improper input neutralization during web page generation. This allows an attacker with low privileges and requiring user interaction to potentially execute arbitrary scripts in the context of the victim's browser. The CVSS v3.1 base score is 6.5, reflecting medium severity with impacts on confidentiality, integrity, and availability. The affected versions include all versions up to 1.0. No patch or vendor advisory is currently provided, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, potentially leading to information disclosure, modification of content, or disruption of availability within the context of the affected web application. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, and user interaction needed, with impacts on confidentiality, integrity, and availability rated as low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor for updates from Sohelwpexpert regarding WP Responsive Video. Until a patch is available, consider disabling or removing the plugin if feasible or restricting access to trusted users only to reduce risk.