The vulnerability CVE-2024-31357 affects BdThemes Ultimate Store Kit Elementor Addons (up to version 1.5.2) and is classified as CWE-79, indicating improper neutralization of input leading to stored cross-site scripting (XSS). This allows an attacker with at least low privileges and requiring user interaction to inject malicious scripts that can execute in the context of other users. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The impact is rated as medium severity with low-level impacts on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's advisory channels for updates. Until a fix is released, consider applying web application firewall (WAF) rules to detect and block XSS payloads targeting this plugin. Avoid exposing the plugin to untrusted users or inputs where possible.