Priority LOW 38
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Happy Addons for Elementor:…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0036 · Published 2024-11-01 · No fix listed CWE-862
Priority LOW 38
Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a through <= 3.10.1.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2024-05-08 · No fix listed CWE-862
Priority LOW 30
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00348 · Published 2024-04-09 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects Happy Addons for Elementor: from n/a…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00291 · Published 2024-04-22 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Leevio Happy Addons for Elementor allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00316 · Published 2024-03-19 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to insufficient input sanitization and output esca…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2024-05-18 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML tags in widgets in all versions up to, and including, 3.10.5 due to insufficient input sanitization and output esc…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00423 · Published 2024-05-02 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Stack Group, Photo Stack, & Horizontal Timeline widgets in all versions up to, and including, 3.10.4…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00543 · Published 2024-05-02 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Photo Stack Widget in all versions up to, and including, 3.10.3 due to insufficient input sanitization and…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00531 · Published 2024-04-09 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘archive_title_tag’ attribute of the Archive Title widget in all versions up to, and including, 3.10.3 due to insuf…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2024-03-07 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the side image URL parameter in the Age Gate in all versions up to, and including, 3.10.1 due to insufficient input san…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00496 · Published 2024-02-20 · No fix listed CWE-79
Priority LOW 29
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wrapper link parameter in the Age Gate in all versions up to, and including, 3.10.1 due to insufficient input sanit…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00581 · Published 2024-02-20 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for E…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00261 · Published 2024-10-06 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the before_label parameter in the Image Comparison widget in all versions up to, and including, 3.12.5 due to insuffici…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2024-11-12 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's PDF View widget in all versions up to, and including, 3.11.2 due to insufficient input sanitization and ou…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2024-07-27 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'arrow' attribute within the plugin's Post Navigation widget in all versions up to, and including, 3.10.9 due to in…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2024-05-31 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and including, 3.10.8 due to insufficient input sanitization and output esca…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00361 · Published 2024-05-18 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ha-ia-content-button’ parameter in all versions up to, and including, 3.10.9 due to insufficient input sanitizatio…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00322 · Published 2024-05-31 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Stack Group widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization and ou…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00329 · Published 2024-05-16 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Event Calendar widget in all versions up to, and including, 3.10.7 due to insufficient input sanitization…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00322 · Published 2024-05-16 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Calendly widget in all versions up to, and including, 3.10.5 due to insufficient input sanitization and output esca…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2024-04-26 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Calendy widget in all versions up to, and including, 3.10.4 due to insufficient input sanitization and out…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0034 · Published 2024-04-09 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Title HTML Tag in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00358 · Published 2024-04-09 · No fix listed CWE-79
Priority LOW 28
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘author_meta_tag’ attribute of the Author Meta widget in all versions up to, and including, 3.10.3 due to insuffici…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00355 · Published 2024-03-07 · No fix listed CWE-79
Priority LOW 25
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 3.10.4 due to insufficient input sanitization and output escaping…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00462 · Published 2024-04-09 · No fix listed CWE-79
Load more