CVE-2022-43164

creationtimestamp| type| source ---|---|--- 2022-10-28 20:29:50+00:00| seen| https://t.me/cibsecurity/52235 2025-05-08 20:23:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15611...

CVE-2022-43164

CVE-2022-43164 : A stored XSS in Rukovoditel v3.2.1 (Global Lists: /index.php?module=global_lists/lists) allows authenticated users to inject script via the Name field after clicking Add. Impact: execution of arbitrary scripts in the victim’s browser. Remediation: upgrade beyond 3.2.1 or apply ve...