medium5.4
CVE-2023-28367
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject a…
Impact
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vektor-Inc | Vk All In One Expansion Unit | before 9.88.2.0 |