Lucene search
CVE-2022-44948
Rukovoditel v3.2.1 stored XSS vulnerability in Entities Group featur
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | CVE-2022-44948 | 2 Dec 202200:00 | – | cvelist |
 | Rukovoditel <= 3.2.1 - Cross-Site Scripting | 7 Jul 202309:38 | – | nuclei |
 | CVE-2022-44948 | 2 Dec 202220:15 | – | nvd |
 | Cross site scripting | 2 Dec 202220:15 | – | prion |
Node
| Source | Link |
|---|---|
| github | www.github.com/anhdq201/rukovoditel/issues/8 |
| rukovoditel | www.rukovoditel.com/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Name | request body | /index.php?module=entities/entities_groups | Stored XSS vulnerability in the Entities Group feature allows execution of arbitrary web scripts via injected payload in the Name field. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo02 Dec 2022 20:15Current
5.3Medium risk
Vulners AI Score5.3
CVSS35.4
EPSS0.00205