CVE Database /
CVE-2024-4391
CVE · Medium
CVE-2024-4391 — Happy Addons for Elementor [happy-elementor-addons] < 3.10.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-4391
|
Happy Addons for Elementor [happy-elementor-addons] < 3.10.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.10.8
|
3.10.8 |
2024-05-15 |
—
|
CVE-2024-4391
The Event Calendar widget in Happy Addons for Elementor through version 3.10.7 contains a stored cross-site scripting vulnerability caused by inadequate sanitization of user input and insufficient escaping of output attributes. Attackers with contributor privileges or higher can inject malicious scripts into pages, which will execute when visitors view the affected pages. The vulnerability impacts all versions up to and including 3.10.7 and was fixed in version 3.10.8.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings