CVE-2023-28367

Publication date

2023-05-23 00:00:00

Family

jpcert

State

PUBLISHED

Description

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.