Description
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=configuration/application. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Copyright Text field after clicking "Add".
Remediation
References
Related Vulnerabilities
WordPress Plugin File Manager Advanced Shortcode Directory Traversal (2.4)
WebLogic CVE-2019-2891 Vulnerability (CVE-2019-2891)
WordPress Plugin Debug Log Manager Security Bypass (2.2.1)
PostgreSQL Arbitrary Code Execution Vulnerbality (CVE-2020-25696)
WordPress Plugin Candidate Application Form Arbitrary File Download (1.0)