CVE-2020-18470

Stored cross-site scripting XSS vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...

PT-2021-10186

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 2.4.1 Description: A stored cross-site scripting XSS issue exists in the Name of application field on the General Configuration page, allowing remote attackers to inject arbitrary web script or HTML via a crafted website...

CVE-2020-18470: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to...