Advisories · Technology
kurudrive VK All in One Expansion Unit.
Every CVE that names kurudrive VK All in One Expansion Unit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta
- kurudrive VK All in One Expansion Unit
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title
- kurudrive VK All in One Expansion Unit
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- kurudrive VK All in One Expansion Unit
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- kurudrive VK All in One Expansion Unit
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure
- kurudrive VK All in One Expansion Unit
- Information disclosure
- CVSS 6.4 Medium
VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className
- kurudrive VK All in One Expansion Unit
- Cross-site scripting (XSS)