CVE-2024-52268: medium-severity vulnerability in Vektor,Inc. VK All in One Expansion Unit
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.3%
Cross-site scripting vulnerability exists in VK All in One Expansion Unit versions prior to 9.100.1.0. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing the web site using the product.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Affected products
Vektor,Inc. · VK All in One Expansion UnitRelated CVEs — Vektor,Inc. VK All in One Expansion Unit
In the same product, most dangerous first.