6.5
Medium
CVE-2026-116850 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Happy Addons for Elementor 3.50 | earliest → 3.50.1 | No fix stated |
Other CVEs of Happy Addons for Elementor
The 6 CVEs of Happy Addons for Elementor →
CVE-2026-109891
Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting…
6.4
Medium
CVE-2026-104393
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy…
6.5
Medium
CVE-2026-25468
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for…
5.3
Medium
CVE-2023-28989
Cross-Site Request Forgery (CSRF) vulnerability in weDevs Happy Addons for Elementor plugin <= 3.8.2 versions
4.3
Medium