This vulnerability (CVE-2024-30519) in Lordicon Animated Icons is classified as CWE-79, indicating improper neutralization of input during web page generation that leads to stored cross-site scripting (XSS). It affects versions up to 2.0.1. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) shows that the attack can be performed remotely over the network with low attack complexity, requires low privileges, and user interaction. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. No vendor-provided patch or official remediation level is currently documented.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected application, potentially leading to partial compromise of user confidentiality, integrity, and availability. The vulnerability requires user interaction and low privileges, limiting the attack scope somewhat. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting exposure by restricting access to trusted users and monitoring for suspicious activity related to the affected component. Avoid relying on this component in untrusted input contexts where possible.