This vulnerability involves improper neutralization of input in the Master Addons for Elementor plugin by Liton Arefin, resulting in a DOM-based cross-site scripting (XSS) issue. The flaw exists in versions up to 2.1.3 and allows an attacker with high privileges and requiring user interaction to execute malicious scripts in the context of the affected web page. The CVSS score is 5.9, indicating a medium severity level with potential impacts on confidentiality, integrity, and availability.

Successful exploitation can lead to limited disclosure of information, modification of data, and disruption of availability within the affected web application. The attack requires high privileges and user interaction, which limits the scope of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from the vendor. Until a fix is available, restricting high privilege user access and limiting exposure to untrusted input may reduce risk.