The vulnerability identified as CVE-2024-53755 affects Andrea Pernici's Third Party Cookie Eraser up to version 1.0.2. It is a Cross-Site Request Forgery (CSRF) issue that enables Stored Cross-Site Scripting (XSS). An attacker can trick a user into submitting a crafted request that causes malicious script storage, potentially compromising confidentiality, integrity, and availability. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low complexity, no privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability. There is no vendor-provided patch or mitigation information at this time.

Successful exploitation of this vulnerability can lead to unauthorized actions performed in the context of an authenticated user and persistent injection of malicious scripts (Stored XSS). This can compromise user data confidentiality, integrity, and availability of the affected application. The attack requires user interaction but no privileges, making it a significant risk for users of the affected software versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with untrusted content and consider disabling or limiting use of the affected Third Party Cookie Eraser extension. Monitor vendor channels for updates and apply patches promptly once released.