PT-2021-15831 · WordPress · Happy Addons For Elementor

Ramuel Gall · Published 2021-05-17 · Updated 2021-05-24 · CVE-2021-24292

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Happy Addons for Elementor WordPress plugin versions prior to 2.24.0 Happy Addons Pro for Elementor WordPress plugin versions prior to 1.17.0

Description The issue concerns stored Cross-Site Scripting (XSS) that can be exploited by lower-privileged users, such as contributors. This is possible due to a flaw in the "Card" widget, which accepts a title tag parameter. Although the element control lists a fixed set of possible HTML tags, an attacker can send a 'save builder' request with the heading tag set to "script" and the actual title parameter set to JavaScript. This JavaScript code can then be executed within the script tags added by the heading tag parameter.

Recommendations For Happy Addons for Elementor WordPress plugin versions prior to 2.24.0, update to version 2.24.0 or later to resolve the issue. For Happy Addons Pro for Elementor WordPress plugin versions prior to 1.17.0, update to version 1.17.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "Card" widget for lower-privileged users until the update is applied.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-24292

Affected Products

Happy Addons For Elementor

References · 6

• 🔥 https://wpscan.com/vulnerability/0f20e098-8106-451f-9448-d35a79f03077 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-24292 · Security Note
• https://osv.dev/vulnerability/CVE-2021-24292 · Vendor Advisory
• https://wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem · Note
• https://t.me/cvenotify/14538 · Telegram Post
• https://t.me/cvenotify/14951 · Telegram Post