CVE-2022-44947

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Highlight Row feature at /index.php?module=entities/listingtypesid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note fiel...

CVE-2022-44947

creationtimestamp| type| source ---|---|--- 2022-12-02 22:37:23+00:00| seen| https://t.me/cibsecurity/53847...

CVE-2022-44947

Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the Highlight Row feature at /index.php?module=entities/listingtypes&entitiesid=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the...

CVE-2022-44947

CVE-2022-44947 concerns Rukovoditel v3.2.1, with a stored XSS vulnerability in the Highlight Row feature. An attacker can inject a crafted payload into the Note field at /index.php?module=entities/listing_types&entities_id=24 after clicking “Add,” potentially executing arbitrary scripts in the vi...