The vulnerability CVE-2024-35705 in Ciprian Popescu's Block for Font Awesome plugin is a stored cross-site scripting (CWE-79) issue caused by improper input sanitization during web page generation. This flaw allows attackers with limited privileges and requiring user interaction to inject malicious scripts that can compromise confidentiality, integrity, and availability. The affected versions include all releases up to 1.4.4. No official fix or patch has been published yet, and the product is not a cloud service, so remediation depends on vendor updates or user-applied mitigations.

Successful exploitation of this vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected web application due to stored XSS. Attackers may execute arbitrary scripts in the context of the victim's browser, potentially leading to session hijacking, defacement, or other malicious actions. However, exploitation requires user interaction and limited privileges, reducing the overall risk severity to medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or sanitization at their application level if possible, and restrict user privileges to minimize risk. Monitor vendor channels for updates and apply patches promptly once released.