CVE-2026-103064

Name of the Vulnerable Software and Affected Versions ElementsKit Elementor addons Lite versions prior to 4.0.7

Description Improper neutralization of input during web page generation allows for Stored Cross-site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page.

Recommendations Update ElementsKit Elementor addons Lite to version 4.0.7 or later.