Lucene search

WpvulndbWPVDB-ID:6003F996-9D59-4A6A-A496-D96AA6A67D9E

HistorySep 27, 2023 - 12:00 a.m.

Happy Elementor Addons Pro < 2.8.1 - Reflected XSS

2023-09-2700:00:00

wpscan.com

plugin

sanitise

escape

parameters

page

cross-site scripting

high privilege

admin

software

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

Description The plugin does not sanitise and escape some parameters before outputting them back in the page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

References

patchstack.com/database/vulnerability/happy-elementor-addons-pro/wordpress-happy-elementor-addons-pro-plugin-2-8-0-reflected-cross-site-scripting-xss-vulnerability