The WPBITS Addons For Elementor Page Builder plugin suffers from a stored XSS vulnerability due to improper input neutralization during web page generation. This vulnerability affects all versions up to 1.5.1. Exploitation requires network access, high privileges, and user interaction, and it can lead to partial confidentiality, integrity, and availability impacts. The CVSS 3.1 vector is AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L, reflecting these conditions. No patch or remediation information is currently available from the vendor or other sources.

Successful exploitation could allow an attacker with high privileges to inject malicious scripts that execute in the context of other users, potentially leading to limited confidentiality, integrity, and availability impacts. However, exploitation requires user interaction and high privileges, which limits the attack scope. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict high-privilege user access and exercise caution with user interactions involving the plugin. Monitor vendor channels for updates and apply patches promptly once released.