CVE-2024-6627

The Happy Addons for Elementor plugin, up to version 3.11.2, is susceptible to Stored Cross-Site Scripting through its PDF View widget. Insufficient input sanitization and inadequate output escaping of user-supplied attributes allow authenticated attackers with contributor-level access or higher to inject malicious scripts that can be executed when other users view the affected pages.

Based on public CVE data (MITRE/NVD).