kurudrive VK All in One Expansion Unit

• CVE-2026-17586 Medium 6.4 VK All in One Expansion Unit <= 9.118.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'vkExUnit_cta_img_position' Post Meta 0.4%
• CVE-2025-11737 Medium 6.4 VK All in One Expansion Unit <= 9.112.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SNS Title 0.2%
• CVE-2025-11265 Medium 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2025-11267 Medium 6.4 VK All in One Expansion Unit <= 9.112.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-2093 Medium 6.5 VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure 0.7%
• CVE-2024-2170 Medium 6.4 VK All in One Expansion Unit <= 9.96.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via className 0.3%