CVE-2024-53714 describes a CSRF vulnerability in the Irish_Cathal Continue Shopping From Cart plugin (<= version 1.3) that allows stored XSS attacks. An attacker can trick a user into submitting unauthorized requests that result in malicious scripts being stored and executed in the context of the affected application. The vulnerability has a CVSS 3.1 base score of 7.1, reflecting network attack vector, low complexity, no privileges required, and user interaction needed, with impacts on confidentiality, integrity, and availability. No patch or official remediation guidance is currently provided, and the product is not a cloud service, so remediation depends on vendor updates or user action.

Successful exploitation of this vulnerability could allow an attacker to execute stored cross-site scripting attacks via CSRF, potentially leading to session hijacking, data theft, or other malicious actions impacting confidentiality, integrity, and availability. The high CVSS score reflects the severity of these impacts. However, no known exploits have been reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider disabling or restricting use of the affected plugin to reduce exposure. Implementing standard CSRF protections and input validation may help mitigate risk, but these are not confirmed fixes for this specific vulnerability.