The ibllex Moose Elementor Kit plugin for WordPress versions up to 1.0.0 contains a DOM-based Cross-site Scripting vulnerability due to improper input neutralization during web page generation. This allows an attacker with low privileges and requiring user interaction to inject and execute malicious scripts in the context of the victim's browser. The vulnerability is tracked as CVE-2024-51856 with a CVSS 3.1 base score of 6.5, indicating medium severity. No patch or official fix has been documented, and no known active exploitation has been reported.

Successful exploitation of this vulnerability could lead to limited confidentiality, integrity, and availability impacts, including the execution of arbitrary scripts in the victim's browser. This may result in information disclosure, session hijacking, or other client-side impacts. However, exploitation requires user interaction and low privileges, which limits the overall risk. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected plugin or disabling it if possible. Monitor for updates from the vendor or trusted security sources for patches or mitigations.