VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 23, 2023· Updated Jun 17, 2026

CVE-2023-27923

CVE-2023-27923

Description

Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Vektor Inc/Vk Blocks2 versions
    cpe:2.3:a:vektor-inc:vk_blocks:*:*:*:*:-:wordpress:*:*+ 1 more
    • cpe:2.3:a:vektor-inc:vk_blocks:*:*:*:*:-:wordpress:*:*range: <1.53.0.1
    • cpe:2.3:a:vektor-inc:vk_blocks:*:*:*:*:pro:wordpress:*:*range: <1.53.0.1
  • VK Blocks/VK Blocksllm-create
    Range: <=1.53.0.1
  • Vektor,Inc./VK Blocks and VK Blocks Prov5
    Range: VK Blocks 1.53.0.1 and earlier, and VK Blocks Pro 1.53.0.1 and earlier

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.