https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T20:23:15.829551+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-211101 EUVD-2026-211101 2026-10-27T20:23:15.832555+00:00 EUVD-2026-211101 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28367 fkie_cve-2023-28367 2026-10-27T20:23:15.832587+00:00

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/ghsa-mqcm-5978-hg9g GHSA-mqcm-5978-hg9g 2026-10-27T20:23:15.832616+00:00

Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.

 https://cve.radiocsirt.org/vuln/gsd-2023-28367 gsd-2023-28367 2026-10-27T20:23:15.832633+00:00 gsd-2023-28367 https://cve.radiocsirt.org/vuln/jvndb-2023-000045 jvndb-2023-000045 2026-10-27T20:23:15.832645+00:00

WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" provided by Vektor,Inc. contain multiple cross-site scripting vulnerabilities (CWE-79) listed below.<ul><li>Cross-site scripting vulnerability in Tag edit function - CVE-2023-27923</li><li>Cross-site scripting vulnerability in Post function - CVE-2023-27925</li><li>Cross-site scripting vulnerability in Profile setting function - CVE-2023-27926</li><li>Cross-site scripting vulnerability in CTA post function - CVE-2023-28367</li></ul>apple502j reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.