Mohammaadfarid

**Name of the Vulnerable Software and Affected Versions** Element Pack Elementor Addons versions up to 5.10.5 **Description** The issue is related to stored cross-site scripting via the Lightbox widget due to insufficient input sanitization and output escaping. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. **Recommendations** For versions up to 5.10.5, update to a version higher than 5.10.5 to resolve the issue. As a temporary workaround, consider restricting access to the Lightbox widget until a patch is available. Additionally, limiting Contributor-level access and above can help minimize the risk of exploitation.