This vulnerability (CVE-2024-30444) in the Zion Builder WordPress Page Builder plugin is classified as CWE-79, indicating improper neutralization of input leading to stored cross-site scripting (XSS). It affects versions through 3.6.9. The flaw allows an attacker with high privileges and requiring user interaction to inject malicious scripts that can be stored and later executed in the context of the affected web application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low level.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to unauthorized actions or data disclosure. The impact is rated medium with partial confidentiality, integrity, and availability impacts. No known active exploitation has been reported.

No official patch or remediation has been published by the vendor as of the current information. Users should monitor the vendor's advisory channels for updates and apply any official fixes once available. Until then, limit high-privilege user access and review input handling where possible to reduce risk.