The vulnerability CVE-2024-53728 affects the Protect Your Content plugin by Oliver Lindner, allowing CSRF attacks that can result in stored XSS. This means an attacker could trick an authenticated user into submitting a request that stores malicious script content, potentially compromising confidentiality, integrity, and availability. The issue impacts versions up to 1.0.2. No vendor advisory or patch information is currently available, and the product is not a cloud service.

Successful exploitation of this vulnerability can lead to stored XSS, which may allow attackers to execute arbitrary scripts in the context of the victim's browser. This can result in information disclosure, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. The CVSS score of 7.1 reflects a high severity impact with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting the use of the affected plugin to reduce exposure. Implementing standard CSRF protections and input validation may help mitigate risk, but these are not confirmed as effective for this specific vulnerability without vendor guidance.