CVE-2020-18469

CVE-2020-18469 is a stored XSS vulnerability in Rukovoditel 2.4.1 affecting the Copyright Text field in the Configuration > Application page. An authenticated user can inject arbitrary web script/HTML by sending a crafted website name via a POST to /rukovoditel_2.4.1/index.php?module=configura...