The Rig Elements For Elementor plugin suffers from a DOM-based cross-site scripting vulnerability due to improper input neutralization during web page generation. This allows an attacker with low privileges and requiring user interaction to potentially execute malicious scripts in the context of the affected web application. The vulnerability affects all versions up to 1.0. No patch or remediation details have been provided in the available data.

Successful exploitation could lead to partial confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:L/I:L/A:L). This means an attacker might be able to execute arbitrary scripts that could steal information, modify content, or disrupt availability to some extent. However, exploitation requires user interaction and some privileges, limiting the ease of attack. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting privileges and be cautious of user interactions that could trigger the vulnerability. Monitor vendor channels for updates and apply patches promptly once available.