CVE-2026-65465

JetElements for Elementor versions up to 2.9.1.1 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, which could allow attackers to inject malicious scripts into web pages viewed by users. This vulnerability poses a medium risk, potentially leading to unauthorized actions or data exposure for users interacting with affected sites. Organizations utilizing this plugin should prioritize patching or upgrading to mitigate the risk of exploitation.