5.4
CVSSv3

CVE-2022-44944

Published: 02/12/2022 Updated: 14/02/2024
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

Rukovoditel v3.2.1 exists to contain a stored cross-site scripting (XSS) vulnerability in the Add Announcement function at /index.php?module=help_pages/pages&entities_id=24. This vulnerability allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

rukovoditel rukovoditel 3.2.1