A Cross-Site Scripting (XSS) vulnerability exists in Cool Plugins Cool Formkit Lite extensions-for-elementor-form due to improper neutralization of script-related HTML tags. This allows code injection in affected versions up to 2.7.10. The vulnerability has a CVSS score of 5.3, indicating medium severity. No known exploits are reported in the wild, and no patch information is provided.