WordPress VK All in One Expansion Unit Plugin <= 9.87.0.1 is vulnerable to Cross Site Scripting (XSS)

Software

VK All in One Expansion Unit

Type

Plugin

Vulnerable versions

<= 9.87.0.1

Fixed in

9.87.1.0

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

N/A

Patch priority

High

CVSS severity

High (7.1)

Developer

Claim ownership

PSID

c3722e6e8342

Credits

WordFence

Required privilege

Unauthenticated

Published

23 February, 2023

Vulnerability details

Expand full details Have additional information or questions about this entry? Let us know.

Solution

We advise to mitigate or resolve the vulnerability immediately.