CVE · Medium

CVE-2023-6632 — Happy Addons for Elementor [happy-elementor-addons] < 3.10.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-6632 Happy Addons for Elementor [happy-elementor-addons] < 3.10.0 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 3.10.0 3.10.0 2024-01-05

CVE-2023-6632

Happy Addons for Elementor versions before 3.10.0 contain a cross-site scripting flaw that researcher xEHLE identified and reported. An attacker could exploit this vulnerability to inject malicious code onto affected websites, enabling them to execute scripts that could redirect visitors, display advertisements, or run arbitrary HTML. The issue has been resolved in version 3.10.0 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.