This vulnerability in Exclusive Addons Elementor allows an attacker with at least low privileges and requiring user interaction to inject and store malicious scripts via improperly sanitized input. When other users view the affected content, the stored scripts may execute, potentially leading to partial confidentiality, integrity, and availability impacts as indicated by the CVSS vector (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). The issue affects versions up to 2.7.1. No patch or official remediation details are currently provided.

Successful exploitation can lead to stored XSS attacks, enabling attackers to execute arbitrary scripts in the context of other users. This can result in partial loss of confidentiality, integrity, and availability of the affected system or user data. The vulnerability requires low privileges and user interaction but can affect multiple users due to its stored nature.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the plugin features for untrusted users and applying web application firewall (WAF) rules to detect and block XSS payloads related to this plugin. Monitor vendor channels for updates and apply patches promptly once released.