This vulnerability, identified as CVE-2024-34445, involves improper input sanitization in SKT Themes SKT Addons for Elementor, leading to stored cross-site scripting (CWE-79). It affects versions up to 1.8 and allows an attacker with low privileges and requiring user interaction to execute arbitrary scripts in the context of the affected web application. The vulnerability has a CVSS 3.1 score of 6.5, reflecting its medium severity with impacts on confidentiality, integrity, and availability. No patch or official remediation level has been provided by the vendor as of the published date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of users visiting the affected web pages, potentially leading to data disclosure, modification, or disruption of service. The impact is rated medium due to the requirement of low privileges and user interaction, and the partial compromise of confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure by restricting privileges where possible and exercising caution with user-generated content. Monitor vendor channels for updates regarding patches or official mitigations.