CVE-2024-37565 is a stored Cross-site Scripting (XSS) vulnerability classified under CWE-79 in the TemeGUM Gum Elementor Addon, versions up to 1.3.5. This vulnerability results from improper neutralization of input during web page generation, which can allow an attacker with high privileges to inject malicious scripts that execute in the context of other users. The CVSS 3.1 base score is 5.9, reflecting network attack vector, low attack complexity, required privileges, and user interaction. No official patch or remediation guidance is currently available from the vendor or other authoritative sources.

Successful exploitation of this vulnerability could allow an attacker with high privileges to inject and store malicious scripts that execute in the browsers of users who view the affected content. This can lead to limited confidentiality, integrity, and availability impacts such as session hijacking, defacement, or other malicious actions within the context of the vulnerable application. However, exploitation requires user interaction and elevated privileges, which reduces the overall risk severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access to the Gum Elementor Addon and monitor for suspicious input or behavior. Avoid exposing the vulnerable addon to untrusted users. Do not rely on generic mitigations unless specifically recommended by the vendor.