Reflected Cross-Site Scripting in Happy Addons for Elementor Plugin
CVE-2023-6632
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 11 January 2024
What is CVE-2023-6632?
The Happy Addons for Elementor plugin for WordPress is affected by a reflected cross-site scripting vulnerability. This flaw arises from inadequate input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts into web pages. These scripts can execute on the browsers of users who are tricked into clicking malicious links, potentially leading to compromised accounts and stolen data. It is crucial for users of this plugin to update to the latest versions to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Happy Addons for Elementor * <= 3.9.1.1
Happy Addons for Elementor Pro * <= 2.9.1.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved