Lucene search

K
cvelistMitreCVELIST:CVE-2022-44950
HistoryDec 02, 2022 - 12:00 a.m.

CVE-2022-44950

2022-12-0200:00:00
mitre
www.cve.org
4
rukovoditel
stored xss
vulnerability
add new field
web scripts
html
name field

EPSS

0.001

Percentile

30.2%

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.

EPSS

0.001

Percentile

30.2%

Related for CVELIST:CVE-2022-44950