VK All in One Expansion Unit, CVE-2023-0230

CVE, Research URL: CVE-2023-0230
Home page URL: Security reports for VK All in One Expansion Unit
Application: VK All in One Expansion Unit
Published on: Feb 27, 2023
Research Description: The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected versions: max 9.87.1.0.
Status: vulnerable