Stored Cross-Site Scripting Vulnerability in Happy Addons for Elementor Plugin

CVE-2024-2786

What is CVE-2024-2786?

The Happy Addons for Elementor plugin for WordPress includes a vulnerability that allows authenticated attackers with contributor-level access to exploit insufficient input sanitization and output escaping in the title_tag attribute across several widgets. This could enable the injection of arbitrary web scripts that execute when users access compromised pages, posing significant risks to website integrity and user trust.

References