CVE-2023-51397: 
WordPress vulnerability analysis and mitigation

The vulnerability (CVE-2023-51397) affects Brainstorm Force's WP Remote Site Search WordPress plugin versions through 1.0.4. It is a Stored Cross-Site Scripting (XSS) vulnerability that was discovered and reported by Rafie Muhammad from Patchstack on December 26, 2023 (Patchstack Advisory).

The vulnerability is classified as a Cross-Site Scripting (XSS) issue, specifically an 'Improper Neutralization of Input During Web Page Generation'. It has received a CVSS v3.1 base score of 5.4 (Medium) from NVD and 6.5 (Medium) from Patchstack. The vulnerability is tracked under CWE-79 (NVD).

This vulnerability could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into the website which will be executed when guests visit the site (Patchstack Advisory).

The vulnerability has been patched in version 1.0.5 of the WP Remote Site Search plugin. Users are advised to update to this version or later to remove the vulnerability. Additionally, Patchstack has issued a virtual patch to mitigate this issue by blocking any attacks until users update to a fixed version (Patchstack Advisory).