Vektor,Inc. VK All in One Expansion Unit

• CVE-2024-52268 Medium 4.8 Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the 0.3%
• CVE-2024-37956 Medium 6.5 WordPress VK All in One Expansion Unit plugin <= 9.99.1.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-28367 Medium 5.4 Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%
• CVE-2023-27926 Medium 5.4 Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script. 0.6%