This vulnerability (CVE-2024-37244) in Ninja Beaver Add-ons for Beaver Builder involves improper input sanitization leading to stored cross-site scripting (CWE-79). It affects all versions up to 2.4.5. The flaw allows attackers with limited privileges and requiring user interaction to inject malicious scripts that can impact confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and partial impact on confidentiality, integrity, and availability.

Successful exploitation can lead to stored XSS attacks, potentially allowing attackers to execute arbitrary scripts in the context of affected users. This can result in data disclosure, modification, or disruption of service. The impact is rated medium based on the CVSS score of 6.5. No known active exploitation has been reported.

No official patch or remediation level has been announced by the vendor as of the published date. Users should monitor the vendor's advisory channels for updates and apply any forthcoming patches promptly. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible to reduce risk.