CVE-2022-43169

Rukovoditel v3.2.1 is affected by a stored XSS in the Users Access Groups feature (/index.php?module=users_groups/users_groups). The vulnerability allows authenticated users to inject arbitrary HTML/JavaScript into the Name field after selecting “Add New Group,” which can lead to execution of scr...