CVE-2023-28367
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
| Vendor | vektor,inc. |
| Product | vk all in one expansion unit |
| Published | May 23, 2023 |
| Last Updated | Jan 17, 2025 |
Stay Ahead of the Next One
Get instant alerts for vektor,inc. vk all in one expansion unit
Be the first to know when new medium vulnerabilities affecting vektor,inc. vk all in one expansion unit are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Vektor,Inc. / VK All in One Expansion Unit
9.88.1.0 and earlier