CVE-2023-27923

2023-05-2300:00:00

jpcert

raw.githubusercontent.com

cross-site scripting

vk blocks

remote attacker

arbitrary script

tag edit function

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.