6.5
Medium
CVE-2026-39483 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hidekazu…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hidekazu Ishikawa VK All in One Expansion Unit vk-all-in-one-expansion-unit allows Stored XSS.This issue affects VK All in One Expansion Unit: from n/a through <= 9.113.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VK All in One Expansion Unit 9.113 | earliest → 9.113.3 | No fix stated |