This vulnerability in themesflat-addons-for-elementor allows stored XSS due to improper input neutralization during web page generation. It affects all versions up to 2.3.2. An attacker with low privileges and requiring user interaction could exploit this to execute arbitrary scripts, potentially impacting confidentiality, integrity, and availability to a limited extent. The vulnerability has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L). No vendor advisory or patch information is currently provided.

Successful exploitation could allow an attacker to execute arbitrary scripts in the context of the affected web application, potentially leading to partial confidentiality, integrity, and availability impacts. The attack requires low privileges and user interaction, and the scope is changed (S:C), meaning the vulnerability can affect resources beyond the vulnerable component. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting user input where possible and applying web application firewall (WAF) rules to detect and block XSS payloads related to this plugin. Monitor official Themesflat channels for updates and patches.