CVE-2024-29108

Happy Addons for Elementor versions prior to 3.10.2 contain a cross-site scripting vulnerability that could enable an attacker to introduce malicious code into the website, which would execute in the browsers of visiting users. The flaw was discovered by Abu Hurayra and allows injection of harmful scripts including redirects, ads, and arbitrary HTML content. Users should upgrade to version 3.10.2 or later to resolve this issue.

Based on public CVE data (MITRE/NVD).