Vulnerability CVE-2023-27926
Published: 2023-05-23

Description:
Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 References:
https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/
https://jvn.jp/en/jp/JVN95792402/
Copyright 2026, cxsecurity.com

 

Back to Top