CVE-2026-65503

The Ultimate Store Kit Elementor Addons versions up to 3.0.5 are vulnerable to a Contributor Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability could lead to unauthorized actions being performed on behalf of users or the theft of sensitive information. Website administrators using the affected versions should prioritize patching to mitigate potential exploitation risks.