Cross site scripting

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27926

Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27925

CVE-2023-27925 is a cross-site scripting vulnerability in VK Blocks and VK Blocks Pro in the Post function, affecting version 1.53.0.1 and earlier. The issue allows an authenticated remote attacker to inject arbitrary scripts via the affected Post function. Public connected sources confirm the at...

CVE-2023-27926

Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27925

Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-28367

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-28367

CVE-2023-28367 affects VK All in One Expansion Unit (WordPress plugin) up to version 9.88.1.0. The issue is a cross-site scripting (XSS) vulnerability in the CTA post function that could allow a remote authenticated attacker to inject arbitrary script. Root cause details are not fully enumerated ...

CVE-2023-27926

CVE-2023-27926 affects VK All in One Expansion Unit (VK AIO) up to version 9.88.1.0. The vulnerability is a cross-site scripting issue in the Profile setting function that can allow a remote authenticated attacker to inject arbitrary scripts. Several connected sources corroborate the issue and ci...

PT-2023-21422 · Unknown +1 · Vk Blocks Pro +1

Name of the Vulnerable Software and Affected Versions: VK Blocks versions 1.53.0.1 and earlier VK Blocks Pro versions 1.53.0.1 and earlier Description: A cross-site scripting issue in the Tag edit function allows a remote authenticated attacker to inject an arbitrary script. This enables the...

CVE-2023-27925

Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

WordPress plugin VK Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-27923

CVE-2023-27923 is a cross-site scripting vulnerability in VK Blocks (and VK Blocks Pro) linked to the Tag edit function. Affected versions are VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier. The vulnerability allows a remote authenticated attacker to inject arbitrary script...

CVE-2023-27923

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script...

CVE-2023-28367

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...

WordPress plugin VK Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2023-21423 · Unknown +1 · Vk Blocks Pro +1

Name of the Vulnerable Software and Affected Versions: VK Blocks versions 1.53.0.1 and earlier VK Blocks Pro versions 1.53.0.1 and earlier Description: A cross-site scripting issue in the Post function allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For VK...

PT-2023-21676 · Unknown · Vk All In One Expansion Unit

Name of the Vulnerable Software and Affected Versions: VK All in One Expansion Unit versions 9.88.1.0 and earlier Description: A cross-site scripting issue in the CTA post function allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions 9.88.1.0 and...

CVE-2023-28367

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script...