CVE-2023-28367

2023-05-2300:00:00

jpcert

www.cve.org

cve-2023-28367

cross-site scripting

vk all in one

remote authenticated attacker

arbitrary script injection

0.001 Low

EPSS

Percentile

44.7%

JSON

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "Vektor,Inc.",
    "product": "VK All in One Expansion Unit",
    "versions": [
      {
        "version": "9.88.1.0 and earlier",
        "status": "affected"
      }
    ]
  }
]