medium5.4
CVE-2023-27926
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to i…
Impact
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vektor-Inc | Vk All In One Expansion Unit | before 9.88.2.0 |