This vulnerability (CVE-2024-37219) involves improper input sanitization in Page Builder Sandwich – Front-End Page Builder, leading to stored Cross-site Scripting (CWE-79). An attacker can inject malicious scripts that are stored and later executed in the context of users visiting the affected pages. The vulnerability affects all versions up to 5.1.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring low privileges and user interaction, with impact on confidentiality, integrity, and availability rated as low to low to low respectively, resulting in an overall medium severity score of 6.5. No patch or official fix has been documented yet.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to theft of user data, session hijacking, or other malicious actions affecting confidentiality, integrity, and availability. However, no known exploits have been reported in the wild, and the impact is rated medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any available workarounds or input sanitization controls at the application or web server level to mitigate stored XSS risks. Monitor vendor channels for updates and patches.