This vulnerability (CVE-2024-38784) in Livemesh Addons for Beaver Builder is due to improper input sanitization leading to stored cross-site scripting (CWE-79). It affects all versions up to 3.6.1. An attacker with high privileges and requiring user interaction could exploit this to execute arbitrary scripts in the context of the affected web application, potentially impacting confidentiality, integrity, and availability. The CVSS vector indicates network attack vector, low attack complexity, high privileges required, and user interaction needed, with partial impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users' browsers, potentially leading to data disclosure, manipulation, or disruption of service. The impact is rated medium based on the CVSS score of 5.9. No active exploitation has been reported.

No official patch or remediation is currently available. Users should monitor the vendor's advisory channels for updates. Until a fix is released, limit high-privilege user access and exercise caution with user-generated content. Avoid enabling or using vulnerable versions if possible.