This vulnerability in piotnetdotcom's Piotnet Addons For Elementor plugin allows stored cross-site scripting due to improper input neutralization during web page generation. It affects all versions up to and including 2.4.31. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and impacts confidentiality, integrity, and availability at a low level. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation could allow an attacker with low privileges to inject and execute malicious scripts in the context of the affected web application, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires user interaction and low privileges, limiting the scope of impact. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected plugin features and monitoring for suspicious activity related to user input handling. Avoid granting unnecessary privileges to users who can interact with the vulnerable functionality.