This vulnerability (CVE-2024-51685) in the Accordion title for Elementor plugin by Michael Gangolf is a stored Cross-site Scripting (CWE-79) issue caused by improper neutralization of input during web page generation. It affects versions up to 1.2.1. The CVSS 3.1 base score is 5.9, with network attack vector, low attack complexity, requiring high privileges and user interaction, and impacts confidentiality, integrity, and availability at a low level. No patch or official remediation level has been disclosed by the vendor or assigner as of the publication date.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to inject malicious scripts that execute in the context of affected users, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, the impact is rated medium due to the required privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit exposure by restricting high-privilege user access and exercising caution with user-generated content in the affected plugin. Monitor vendor channels for updates.