Reflected Cross-Site Scripting in Happy Addons for Elementor Plugin

CVE-2023-6632

Summary

The Happy Addons for Elementor plugin for WordPress is affected by a reflected cross-site scripting vulnerability. This flaw arises from inadequate input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts into web pages. These scripts can execute on the browsers of users who are tricked into clicking malicious links, potentially leading to compromised accounts and stolen data. It is crucial for users of this plugin to update to the latest versions to mitigate the risk associated with this vulnerability.

References