CVE Database /
CVE-2023-0230
CVE · Medium
CVE-2023-0230 — VK All in One Expansion Unit [vk-all-in-one-expansion-unit] < 9.86.0.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-0230
|
VK All in One Expansion Unit [vk-all-in-one-expansion-unit] < 9.86.0.0 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 9.86.0.0
|
9.86.0.0 |
2023-02-03 |
—
|
CVE-2023-0230
The VK All in One Expansion Unit plugin for WordPress contained a cross-site scripting vulnerability in versions prior to 9.86.0.0 that allowed attackers to inject malicious scripts into websites. An attacker could exploit this flaw to execute arbitrary code, including redirects, ads, and other HTML content, which would run when visitors accessed the affected site. The vulnerability was identified by Lana Codes and has been patched in version 9.86.0.0 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings