A vulnerability described as problematic has been identified in unitecms Unlimited Elements for Elementor Plugin up to 2.0.5 on WordPress. Affected is an unknown function of the component Form Submission Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-2724. The attack can be launched remotely. No exploit exists.