CVE-2025-30766

Summary

CVE-2025-30766 is a Cross-site Scripting (XSS) vulnerability affecting Happy Monster's Happy Addons for Elementor. The flaw, located in the web page generation process, enables an attacker to inject malicious scripts into a victim's web browser. This DOM-Based XSS issue is severe and can be exploited even if the addons are not actively in use, impacting versions from n/a to 3.16.2. Successful exploitation can result in data theft, unauthorized access, and other unwanted activities. It's crucial for users to update their addons immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.