The vulnerability CVE-2024-52387 in Liton Arefin Master Addons for Elementor is a stored cross-site scripting issue caused by improper input neutralization during web page generation. It affects all versions up to 2.0.9.9.4. An attacker with high privileges and requiring user interaction can exploit this to execute arbitrary scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. No patch or official remediation information is currently provided.

Successful exploitation could allow an attacker with high privileges to inject and execute malicious scripts in the context of the affected web application, potentially leading to limited compromise of confidentiality, integrity, and availability. However, exploitation requires user interaction and elevated privileges, which limits the attack scope. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin to trusted users only and monitor for suspicious activity related to input handling. Avoid exposing the vulnerable plugin to untrusted users. Follow updates from the vendor for any released patches or official mitigations.