Cross site scripting

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

CVE-2021-24292

The Happy Addons for Elementor WordPress plugin before 2.24.0, Happy Addons Pro for Elementor WordPress plugin before 1.17.0 have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget...

CVE-2021-24292

The CVE concerns WordPress plugins Happy Addons for Elementor Free (<2.24.0) and Happy Addons Pro for Elementor (

WordPress plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in Happy Addo...

Happy Addons for Elementor Free < 2.24.0 and Pro < 1.17.0 - Contributor+ Stored XSS

The plugins have a number of widgets that are vulnerable to stored Cross-Site ScriptingXSS by lower-privileged users such as contributors, all via a similar method: The “Card” widget accepts a “titletag” parameter. Although the element control lists a fixed set of possible html tags, it is possib...

Automattic: Permanent DoS at https://happy.tools/ when inviting a user

Hi Team, At Happy Tools, I found an exception to the exclusion of denial of service. The web app allows creating an account/login into an account either using Gmail or WordPress. The vulnerability lies in the fact that after registration, a user can change their email without verification. Steps ...

harrys-happy-home.com Cross Site Scripting vulnerability OBB-1412435

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

harrys-happy-home.com Cross Site Scripting vulnerability OBB-1385966

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

happy-puppy.co.id Cross Site Scripting vulnerability OBB-1304089

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

happy-brands.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1179215 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

happytailsmagazine.co.za Open Redirect vulnerability

Open Bug Bounty ID: OBB-1081952 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Ltd. happy city localized e-commerce APP has logic flaws vulnerability

Happy Merchant App is a store management software that serves merchant users. There is a logic flaw vulnerability in the Happy City localized e-commerce APP of Jiangsu Patrol Network Technology Co. Attackers can utilize the vulnerability to log in to the system with any user including the merchan...

happy-mall.kr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-958578 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Fedora 30 : glib2 (2019-c18d2bd1bd)

glib 2.60.4 release : - Fixes to improved network status detection with NetworkManager - Leak fixes to some glib-genmarshal generated code - Further fixes to the Happy Eyeballs RFC 8305 implementation - File system permissions fix to clamp down permissions in a small time window when copying file...

happy-or-not.com XSS vulnerability

Open Bug Bounty ID: OBB-716399 Description| Value ---|--- Affected Website:| happy-or-not.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

happy-neuron.com XSS vulnerability

Open Bug Bounty ID: OBB-655880 Description| Value ---|--- Affected Website:| happy-neuron.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

happy-links.de XSS vulnerability

Open Bug Bounty ID: OBB-614504 Description| Value ---|--- Affected Website:| happy-links.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Happy Kangaroo App has SMS Bombing Vulnerability

Happy Kangaroo App is a financial app. There is an SMS bombing vulnerability in Happy Kangaroo APP. An attacker can exploit this vulnerability to replay packets sending CAPTCHA without restriction and bombard the client with SMS messages...

Korea In The Crosshairs

This blog post is authored by Warren Mercer and Paul Rascagneres and with contributions from Jungsoo An. A one year review of campaigns performed by an actor with multiple campaigns mainly linked to South Korean targets. Executive Summary This article exposes the malicious activities of Group 123...

happy-immo.fr XSS vulnerability

Vulnerable URL: https://www.happy-immo.fr/contact2.asp?q=3%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2862743 VIP website status:| ...