Stored Cross-Site Scripting in Happy Addons for Elementor Plugin for WordPress

CVE-2024-0438

What is CVE-2024-0438?

The Happy Addons for Elementor plugin for WordPress has a vulnerability that allows for Stored Cross-Site Scripting through the 'wrapper link' parameter in the Age Gate feature. This vulnerability arises from inadequate input sanitization and output escaping mechanisms. Authenticated attackers with contributor access or higher may exploit this flaw to inject malicious scripts into pages. As a result, any user accessing those compromised pages could unwittingly execute these scripts, posing significant security risks to the site's integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References