The vulnerability CVE-2024-53774 in Jakub Glos Sparkle Elementor Kit (<= 2.0.9) is a DOM-based Cross-site Scripting (XSS) issue resulting from improper input neutralization during web page generation. This allows an attacker with low privileges and requiring user interaction to potentially execute arbitrary scripts, impacting confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 base score is 6.5, indicating a medium severity level. No patch or official fix has been disclosed yet, and no known active exploitation has been reported.

Successful exploitation could lead to limited confidentiality, integrity, and availability impacts by enabling script execution in the victim's browser context. This could result in actions such as session hijacking or manipulation of web page content, but requires user interaction and low privilege access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution with untrusted input and consider applying temporary mitigations such as disabling or restricting the use of the affected plugin if feasible.