CVE-2024-51678: Stored Cross-Site Scripting (XSS) vulnerability found in Marcel Pol Elo Rating Shortcode versions up to 1.0.3. This flaw allows attackers to inject malicious scripts into web pages, potentially compromising user accounts and data. With a SOCRadar Vulnerability Risk Score (SVRS) of 53, this vulnerability requires attention. While not critical (SVRS above 80), the presence of this XSS vulnerability, categorized as CWE-79, indicates a moderate risk because threat actors could exploit it to execute arbitrary code in a user's browser. If successful, attackers can steal session cookies, redirect users to phishing sites, or deface websites. Despite the CVSS score of 5.4, the SVRS highlights the importance of promptly patching to prevent potential exploitation and associated reputational damage. Update Elo Rating Shortcode immediately to the latest version to mitigate this threat.