Description

Rukovoditel before 2.4.1 allows XSS.

Remediation

References

CVE-2019-7400

Related Vulnerabilities

Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-23163)

WordPress Plugin Smash Balloon Social Post Feed Security Bypass (4.0)

WordPress Plugin The Welcomizer 'twiz-index.php' Cross-Site Scripting (1.3.9.4)

WordPress Plugin WP Quick FrontEnd Editor Multiple Vulnerabilities (5.5)

WordPress Plugin All-in-One Addons for Elementor-WidgetKit Cross-Site Scripting (2.4.3)

Severity

Medium

Classification

CVE-2019-7400 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities