The vulnerability CVE-2024-53764 affects SoftHopper Softtemplates For Elementor (<= 1.0.8) and involves improper neutralization of input during web page generation, resulting in a DOM-based Cross-site Scripting (XSS) issue. This allows an attacker with at least limited privileges and user interaction to inject malicious scripts that can impact confidentiality, integrity, and availability to a limited extent. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges and user interaction, with a scope change and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the victim's browser, potentially leading to information disclosure, modification of web content, or disruption of service. The impact is rated medium due to the requirement of privileges and user interaction and the limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with input handling and consider disabling or restricting use of the affected plugin version. Monitor official SoftHopper communications for updates on patches or mitigations.