CVE-2024-50553 describes a DOM-based cross-site scripting vulnerability in Classy Addons for Elementor, affecting versions up to and including 1.2.7. The issue arises from improper neutralization of input during web page generation, which can be exploited by an attacker with low complexity and requiring user interaction and privileges to execute malicious scripts in the context of the affected web application. The vulnerability impacts confidentiality, integrity, and availability to a limited extent.

Successful exploitation of this vulnerability can lead to partial disclosure of sensitive information, modification of data, and disruption of service within the affected web environment. The CVSS score of 6.5 reflects a medium severity with network attack vector, low attack complexity, requiring privileges and user interaction, and scope change. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with user input and consider implementing additional input validation or content security policies as temporary mitigations. Monitor Classy Addons vendor channels for updates and apply official patches promptly once available.