cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2023-6632,https://securityvulnerability.io/vulnerability/CVE-2023-6632,Reflected Cross-Site Scripting in Happy Addons for Elementor Plugin,"The Happy Addons for Elementor plugin for WordPress is affected by a reflected cross-site scripting vulnerability. This flaw arises from inadequate input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts into web pages. These scripts can execute on the browsers of users who are tricked into clicking malicious links, potentially leading to compromised accounts and stolen data. It is crucial for users of this plugin to update to the latest versions to mitigate the risk associated with this vulnerability.",Wordpress,"Happy Addons for Elementor Pro,Happy Addons for Elementor",6.1,MEDIUM,0.0007099999929778278,false,,false,false,false,,false,false,2024-01-11T08:32:27.224Z,0
CVE-2021-24292,https://securityvulnerability.io/vulnerability/CVE-2021-24292,Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS,"The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “title_tag” parameter. Although the element control lists a fixed set of possible html tags, it is possible to send a ‘save_builder’ request with the “heading_tag” set to “script”, and the actual “title” parameter set to JavaScript to be executed within the script tags added by the “heading_tag” parameter.",Wordpress,"Happy Addons For Elementor,Happy Addons Pro For Elementor",5.4,MEDIUM,0.000539999979082495,false,,false,false,false,,false,false,2021-05-17T16:48:53.000Z,0