Description

Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

Remediation

References

CVE-2024-34469

Related Vulnerabilities

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Directory Traversal (1.3.42)

WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.7)

Apache Traffic Server Unchecked Return Value Vulnerability (CVE-2024-50306)

Oracle JRE CVE-2013-0429 Vulnerability (CVE-2013-0429)

WordPress Plugin Sendit WP Newsletter SQL Injection (2.5.1)

Severity

High

Classification

CVE-2024-34469 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities