This vulnerability (CVE-2024-43324) in CleverSoft Clever Addons for Elementor is classified as CWE-79, indicating improper neutralization of input leading to stored XSS. The flaw allows an attacker with high privileges and requiring user interaction to inject malicious scripts that persist and execute when viewed by other users. The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability. The affected product versions include all up to 2.2.0. No patch or official remediation level has been published yet.

Successful exploitation could allow an attacker with high privileges to inject persistent malicious scripts that execute in the browsers of users viewing the affected pages, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system or user data. However, exploitation requires user interaction and elevated privileges, which limits the attack scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit privileges to trusted users to reduce risk of exploitation. Monitor vendor channels for updates and apply official patches once released.