This vulnerability (CVE-2024-35704) in WPBlockArt BlockArt Blocks is classified as CWE-79, indicating improper neutralization of input leading to stored cross-site scripting (XSS). It affects versions through 2.1.5 and allows an attacker with low privileges to inject malicious scripts that execute when a user views the affected content. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) reflects network attack vector, low attack complexity, requiring privileges and user interaction, with partial impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

Successful exploitation could allow an attacker with low privileges to inject persistent malicious scripts that execute in the context of other users, potentially leading to partial disclosure of information, modification of data, and some disruption of availability. The vulnerability requires user interaction and privileges, limiting the ease of exploitation. No active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin and monitoring for suspicious activity related to BlockArt Blocks. Avoid granting unnecessary privileges to users who can interact with this plugin.