This vulnerability (CVE-2024-43320) in Livemesh Addons for WPBakery Page Builder is due to improper input sanitization leading to stored cross-site scripting (CWE-79). It affects versions up to 3.9 and can be exploited by an attacker with limited privileges who can trick a user into triggering the malicious script. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published by the vendor as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to data disclosure, modification, or denial of service. The impact includes partial loss of confidentiality, integrity, and availability. However, exploitation requires user interaction and some level of privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting user input capabilities and applying web application firewall (WAF) rules to detect and block suspicious input patterns related to XSS. Monitor vendor channels for updates or patches.