The vulnerability identified as CVE-2024-53745 affects the Cosmosfarm 소셜 공유 버튼 By 코스모스팜 plugin through improper input neutralization during web page generation, leading to stored cross-site scripting (XSS). This allows attackers with low privileges and requiring user interaction to inject malicious scripts that execute in the context of other users. The vulnerability impacts versions up to 1.9. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction required, and a scope change with low impact on confidentiality, integrity, and availability.

Successful exploitation of this stored XSS vulnerability can lead to unauthorized script execution in users' browsers, potentially compromising user data confidentiality and integrity, and causing partial availability impact. The attacker must have low privileges and rely on user interaction to trigger the payload. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider disabling or removing the affected plugin if feasible. Monitor official Cosmosfarm communications for updates and apply any official fixes promptly once released.