Description
Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.
Remediation
References
Related Vulnerabilities
ProjectSend Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2018-7201)
WordPress Plugin Cryptocurrency Widgets-Price Ticker & Coins List Security Bypass (2.4)
Jenkins CVE-2015-7538 Vulnerability (CVE-2015-7538)
Lighttpd Other Vulnerability (CVE-2007-3948)
Craft CMS Files or Directories Accessible to External Parties Vulnerability (CVE-2024-52292)