Description
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab function at /index.php?module=entities/forms&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Remediation
References
Related Vulnerabilities
Moodle Incorrect Authorization Vulnerability (CVE-2025-3644)
WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.9.4)
WordPress Plugin WP Booking System Multiple Vulnerabilities (1.5.1)
Django Other Vulnerability (CVE-2009-3695)
WordPress Plugin UserPro-Community and User Profile Privilege Escalation (4.9.20)