CVE-2026-65534

The vulnerability affects the Elementor Image Carousel plugin versions 1.1.1 and earlier, allowing for Cross-Site Scripting (XSS) attacks through custom links. This could enable attackers to inject malicious scripts, potentially compromising user data and site integrity. Website administrators using affected versions should prioritize patching to mitigate the risk of exploitation.