Description
Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename.
Remediation
References
Related Vulnerabilities
Jenkins URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2025-27625)
MySQL Other Vulnerability (CVE-2006-4226)
Liferay DXP Insertion of Sensitive Information Into Sent Data Vulnerability (CVE-2025-43814)
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)
MOVEit Transfer Path Equivalence: 'filename ' (Trailing Space) Vulnerability (CVE-2026-8801)