# kurudrive VK All in One Expansion Unit.

Every CVE that names kurudrive VK All in One Expansion Unit among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta](https://agentprime.io/advisories/CVE-2026-17586.md)
  `CVE-2026-17586` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.4 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS)
- [VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title](https://agentprime.io/advisories/CVE-2025-11737.md)
  `CVE-2025-11737` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.4 Medium · Not analysed yet · Published 18 Feb 2026 · Tags: Cross-site scripting (XSS)
- [VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-11265.md)
  `CVE-2025-11265` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.4 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Cross-site scripting (XSS)
- [VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-11267.md)
  `CVE-2025-11267` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.4 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: Cross-site scripting (XSS)
- [VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure](https://agentprime.io/advisories/CVE-2024-2093.md)
  `CVE-2024-2093` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.5 Medium · Not analysed yet · Published 9 Apr 2024 · Tags: Information disclosure
- [VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className](https://agentprime.io/advisories/CVE-2024-2170.md)
  `CVE-2024-2170` · CVE record: kurudrive VK All in One Expansion Unit · CVSS 6.4 Medium · Not analysed yet · Published 26 Mar 2024 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=kurudrive-vk-all-in-one-expansion-unit>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/kurudrive-vk-all-in-one-expansion-unit/>. Everything for agents: <https://agentprime.io/llms.txt>.