The vulnerability CVE-2024-52489 in the udidol Add Chat App Button plugin allows stored cross-site scripting due to improper input neutralization during web page generation. This can lead to execution of malicious scripts when users access affected content. The issue affects versions up to 2.1.5. The CVSS vector indicates the attack requires network access, low attack complexity, high privileges, and user interaction, with impacts on confidentiality, integrity, and availability rated as low to low-medium.

Successful exploitation of this stored XSS vulnerability could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to information disclosure, data manipulation, or denial of service. The impact is rated medium severity with partial loss of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high privilege user access and avoid interacting with untrusted input in the Add Chat App Button plugin. Monitor vendor channels for updates and apply patches promptly once released.