This vulnerability in Livemesh Addons for WPBakery Page Builder involves improper input sanitization that leads to stored cross-site scripting (XSS). Attackers could inject malicious scripts that persist on the affected site and execute when viewed by users. The issue affects all versions up to 3.9.4. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, and impacts confidentiality, integrity, and availability at a low to medium level. No patch or vendor advisory details are currently available.

Successful exploitation could allow an attacker with high privileges and requiring user interaction to execute arbitrary scripts in the context of the affected web application. This may lead to partial compromise of confidentiality, integrity, and availability of the affected system. However, the impact is rated medium, and no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with user input and consider applying temporary mitigations such as input validation or disabling vulnerable components if feasible.