Lucene search
PRIOn knowledge basePRION:CVE-2022-44949HistoryDec 02, 2022 - 8:15 p.m.
Cross site scripting
2022-12-0220:15:00
PRIOn knowledge base
www.prio-n.com
5
rukovoditel v3.2.1
cross-site scripting
add new field
short name field
web scripts
html
entities/fields
0.001 Low
EPSS
Percentile
30.3%
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Field function at /index.php?module=entities/fields&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Short Name field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rukovoditel | eq | 3.2.1 |
Related
cve
cve
CVE-2022-44949
2022-12-02 20:15:14
nuclei
nuclei
Rukovoditel <= 3.2.1 - Cross Site Scripting
2023-07-07 09:38:49
cvelist
cvelist
CVE-2022-44949
2022-12-02 00:00:00
nvd
nvd
CVE-2022-44949
2022-12-02 20:15:14