CVE-2024-50543: 
WordPress vulnerability analysis and mitigation

The CVE-2024-50543 is a Cross-site Scripting (XSS) vulnerability affecting the Amazing Team's amazing neo icon font for elementor WordPress plugin through version 2.0.1. The vulnerability was discovered and reported by researcher Gab on October 18, 2024, and was publicly disclosed on October 31, 2024 (Patchstack).

The vulnerability is classified as a DOM-Based Cross-site Scripting (XSS) issue with a CVSS v3.1 base score of 6.5 (Medium), using the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. The vulnerability is tracked under CWE-79 (Improper Neutralization of Input During Web Page Generation) (NVD).

This vulnerability could allow authenticated attackers with Contributor-level access or higher to inject malicious scripts into the website. When executed, these scripts could potentially lead to unauthorized actions, including redirects, insertion of unwanted advertisements, and execution of other HTML payloads when visitors access the affected pages (Patchstack).

As of November 2024, no official fix has been released for this vulnerability. The issue is considered to have a low severity impact and is unlikely to be exploited (Patchstack).