Description
Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.
Remediation
References
Related Vulnerabilities
WordPress Plugin Events Manager Multiple Vulnerabilities (5.5.7.1)
WordPress Plugin Site Analytics Multiple Vulnerabilities (1.4.3)
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Scripting (2.1.7)
Java Unspesificed Vulnerability (CVE-2019-2426)
Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1999046)