description: Cross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9.88.1.0 and earlier allows a remote authenticated attacker to inject an arbitrary script.
problem types: Cross-site scripting
affected:
{
vendor: Vektor,Inc.
product: VK All in One Expansion Unit
versions:
version: 9.88.1.0 and earlier, status: affected
}