The vulnerability CVE-2024-53719 affects the Zajax – Ajax Navigation plugin by onigetoc, specifically versions up to 0.4. It is a Cross-Site Request Forgery (CSRF) issue that enables stored Cross-Site Scripting (XSS). The CVSS v3.1 score is 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. There is no indication of known exploits in the wild or available patches at this time.

Successful exploitation of this vulnerability could allow an attacker to execute unauthorized requests on behalf of an authenticated user, resulting in stored XSS. This can lead to data theft, session hijacking, or other malicious actions impacting confidentiality, integrity, and availability of the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting use of the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once released.