CVE-2020-11822: Improper Neutralization of Input During Web Page Generation

In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure -- user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data...

PT-2020-12871

Name of the Vulnerable Software and Affected Versions Rukovoditel version 2.5.2 Description The issue is related to a stored XSS vulnerability located on the application structure -- user access groups page. This allows an attacker to inject malicious scripts, potentially leading to the theft of...