Medium severity5.4NVD Advisory· Published May 23, 2023· Updated Jun 17, 2026
CVE-2023-28367
CVE-2023-28367
Description
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:vektor-inc:vk_all_in_one_expansion_unit:*:*:*:*:*:wordpress:*:*Range: <9.88.2.0
- Range: <=9.88.1.0
- Vektor,Inc./VK All in One Expansion Unitv5Range: 9.88.1.0 and earlier
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN95792402/nvdThird Party Advisory
- www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/nvdVendor Advisory
News mentions
0No linked articles in our index yet.