This vulnerability (CVE-2024-34563) in GoldAddons Gold Addons for Elementor is a stored cross-site scripting (CWE-79) flaw caused by improper input sanitization during web page generation. It affects versions up to 1.2.9 and allows attackers with at least low privileges and user interaction to inject malicious scripts that can compromise confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 score of 6.5 reflects network attack vector, low attack complexity, required privileges, user interaction, and partial impact on confidentiality, integrity, and availability. No official remediation or patch is currently documented.

Successful exploitation can lead to stored XSS attacks, potentially allowing attackers to execute arbitrary scripts in the context of affected users. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. The impact is rated medium severity based on the CVSS score. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with input handling and consider applying temporary mitigations such as disabling or restricting the vulnerable plugin. Monitor official GoldAddons communications for updates and patches.