The vulnerability CVE-2024-53777 affects the Simple Header and Footer plugin by Alberto Reineri, allowing CSRF attacks that result in stored XSS. The affected versions are up to 1.0.0. The CVSS 3.1 base score is 7.1, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and scope changed. The vulnerability can lead to partial loss of confidentiality, integrity, and availability. No known exploits in the wild or patch information are currently available.

Successful exploitation of this vulnerability can allow an attacker to execute stored XSS via CSRF, potentially leading to unauthorized actions on behalf of authenticated users. This can compromise confidentiality, integrity, and availability of the affected system to a limited extent. The vulnerability is exploitable remotely over the network and requires user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected plugin and apply any recommended temporary mitigations from the vendor. Monitor vendor channels for updates.