This vulnerability (CVE-2024-51674) in Fast Themes Sastra Essential Addons for Elementor involves improper neutralization of input during web page generation, leading to a DOM-based Cross-site Scripting (XSS) issue. It affects versions up to 1.0.5. The CVSS 3.1 base score is 6.5, indicating medium severity, with an attack vector of network, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality, integrity, and availability. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker with low privileges to execute arbitrary scripts in the context of the victim's browser, potentially leading to information disclosure, modification of web content, or disruption of service. The impact affects confidentiality, integrity, and availability to a limited extent as indicated by the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider limiting exposure by restricting plugin usage or applying temporary mitigations if documented by the vendor. Monitor official Fast Themes communications for updates.