Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43185
HistoryOct 19, 2022 - 2:15 p.m.

Cross site scripting

2022-10-1914:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-site scripting
rukovoditel v3.2.1
configuration module
holidays
crafted payload
name parameter
arbitrary web scripts
html
vulnerability

0.37 Low

EPSS

Percentile

97.2%

A stored cross-site scripting (XSS) vulnerability in the Configuration/Holidays module of Rukovoditel v3.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.

CPENameOperatorVersion
rukovoditeleq3.2.1

0.37 Low

EPSS

Percentile

97.2%

Related for PRION:CVE-2022-43185