CVE-2023-28367 — Vektor,Inc. / VK All in One Expansion Unit

CVE-2023-28367

Vektor,Inc. / VK All in One Expansion Unit PUBLISHED

Description (CNA)

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.

Affected (CNA)

Vendor / product	Versions
Vektor,Inc. / VK All in One Expansion Unit	affected 9.88.1.0 and earlier

CWE

No CWE identifiers supplied.

References

https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/
https://jvn.jp/en/jp/JVN95792402/

ADP enrichment

CVE

No English description supplied.

https://www.vektor-inc.co.jp/product-update/vk-blocks-exunit-xss/
https://jvn.jp/en/jp/JVN95792402/

CISA-ADP

No English description supplied.

No references supplied.