This vulnerability in CWD Web Designer's Easy Elements Hider component allows stored cross-site scripting due to improper input neutralization during web page generation. Attackers with high privileges and requiring user interaction could exploit this to execute scripts in the context of affected users. The vulnerability affects versions up to 2.0 and has a CVSS 3.1 base score of 5.9, reflecting medium severity with network attack vector, low attack complexity, and partial impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of affected users, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. However, exploitation requires high privileges and user interaction, which limits the ease of exploitation. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, users should exercise caution with input handling and consider restricting access to the affected component to trusted users only.