Lucene search
MitreCVELIST:CVE-2022-44949HistoryDec 02, 2022 - 12:00 a.m.
CVE-2022-44949
2022-12-0200:00:00
mitre
www.cve.org
1
rukovoditel v3.2.1
stored cross-site scripting
add new field
entities/fields
short name field
vulnerability
0.001 Low
EPSS
Percentile
30.3%
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Short Name field.
Related
cve
cve
CVE-2022-44949
2022-12-02 20:15:14
nuclei
nuclei
Rukovoditel <= 3.2.1 - Cross Site Scripting
2023-07-07 09:38:49
prion
prion
Cross site scripting
2022-12-02 20:15:00
nvd
nvd
CVE-2022-44949
2022-12-02 20:15:14