This vulnerability (CVE-2024-43960) involves improper input sanitization in the Web and WooCommerce Addons for WPBakery Builder, leading to stored cross-site scripting (CWE-79). An attacker with high privileges and requiring user interaction can exploit this to execute arbitrary scripts in the context of affected web pages. The issue affects versions up to 1.4.6 and has a CVSS 3.1 base score of 5.9, indicating medium severity. No patch or official remediation level has been published yet, and no known exploits have been reported.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of users viewing the affected pages, potentially leading to information disclosure, session hijacking, or other impacts related to cross-site scripting. The vulnerability requires user interaction and elevated privileges, which limits the attack scope. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should restrict high privilege access to trusted users and consider additional input validation or web application firewall rules to mitigate potential exploitation. Monitor vendor channels for updates.