Lucene search
JpcertCVELIST:CVE-2023-27926HistoryMay 23, 2023 - 12:00 a.m.
CVE-2023-27926
2023-05-2300:00:00
jpcert
www.cve.org
2
cross-site scripting
profile setting
remote attacker
arbitrary script
cve-2023-27926
EPSS
0.001
Percentile
44.5%
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
CNA Affected
[
{
"vendor": "Vektor,Inc.",
"product": "VK All in One Expansion Unit",
"versions": [
{
"version": "9.88.1.0 and earlier",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-27926
2023-05-23 02:15:10
prion
prion
Cross site scripting
2023-05-23 02:15:00
nvd
nvd
CVE-2023-27926
2023-05-23 02:15:10
wpvulndb
wpvulndb
VK Blocks < 1.54.0 - Multiple Stored XSS
2023-05-09 00:00:00
VK All in One Expansion Unit < 9.88.2 - Multiple Stored XSS
2023-05-09 00:00:00
jvn
jvn
wordfence
wordfence