Description
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab function at /index.php?module=entities/forms&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Remediation
References
Related Vulnerabilities
MySQL CVE-2016-0599 Vulnerability (CVE-2016-0599)
WordPress Plugin YARPP-Yet Another Related Posts Multiple Vulnerabilities (4.2.4)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-0499)
WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233)