CVE-2023-27925
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.
| Vendor | vektor,inc. |
| Product | vk blocks and vk blocks pro |
| Published | May 23, 2023 |
| Last Updated | Jan 17, 2025 |
Stay Ahead of the Next One
Get instant alerts for vektor,inc. vk blocks and vk blocks pro
Be the first to know when new medium vulnerabilities affecting vektor,inc. vk blocks and vk blocks pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Vektor,Inc. / VK Blocks and VK Blocks Pro
VK Blocks 1.53.0.1 and earlier, and VK Blocks Pro 1.53.0.1 and earlier