This vulnerability (CVE-2024-31346) involves improper neutralization of input in the Blocksmarket Gradient Text Widget for Elementor, leading to stored cross-site scripting (CWE-79). It affects versions up to 1.0.1. An attacker with at least low privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of the affected web application. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation could allow an attacker to inject and execute malicious scripts within the context of the vulnerable web application, potentially leading to data disclosure, modification, or disruption of service. The impact is rated medium based on the CVSS score of 6.5, reflecting limited privileges required but user interaction necessary.

No official patch or remediation is currently available for this vulnerability. Users of the Blocksmarket Gradient Text Widget for Elementor should monitor the vendor's advisory channels for updates. Until a fix is released, consider restricting access to the widget or disabling it if feasible to reduce exposure.