This vulnerability (CVE-2024-43342) in BdThemes Ultimate Store Kit Elementor Addons involves improper input sanitization leading to stored cross-site scripting (CWE-79). It affects versions up to 1.6.4 and allows an attacker with low privileges and requiring user interaction to inject malicious scripts that execute in other users' browsers. The CVSS vector indicates network attack vector, low attack complexity, privileges required, user interaction required, and impacts on confidentiality, integrity, and availability at a low level. No vendor-provided patch or official remediation level is currently available.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of users visiting affected pages, potentially leading to information disclosure, session hijacking, or other impacts on confidentiality, integrity, and availability. The CVSS score of 6.5 reflects a medium impact. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying workarounds such as disabling or limiting the use of the affected plugin or employing web application firewalls that can detect and block XSS payloads. Monitor vendor channels for updates and apply patches promptly once available.