Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43167
HistoryOct 28, 2022 - 5:15 p.m.

Cross site scripting

2022-10-2817:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
stored xss
rukovoditel v3.2.1
users alerts
crafted payload

0.003 Low

EPSS

Percentile

68.9%

A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_alerts) of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter after clicking “Add”.

CPENameOperatorVersion
rukovoditeleq3.2.1

0.003 Low

EPSS

Percentile

68.9%

Related for PRION:CVE-2022-43167