Maik Robert

**Name of the Vulnerable Software and Affected Versions** Happy Addons for Elementor versions up to 3.9.1.1 Happy Addons for Elementor Pro versions up to 2.9.1.1 **Description** The issue is related to Reflected Cross-Site Scripting via DOM due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. **Recommendations** For Happy Addons for Elementor versions up to 3.9.1.1, update to a version later than 3.9.1.1 to resolve the issue. For Happy Addons for Elementor Pro versions up to 2.9.1.1, update to a version later than 2.9.1.1 to resolve the issue. As a temporary workaround, consider restricting user interactions with potentially vulnerable pages until a patch is available.