Description
Cross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Vektor,Inc. | VK All in One Expansion Unit | 9.88.1.0 and earlier | — |