CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...

CVE-2024-34468

Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...

CVE-2024-34468

CVE-2024-34468 affects Rukovoditel prior to 3.5.3. The issue is an input handling failure in the user_photo parameter that enables a cross-site scripting (XSS) payload in the My Page view. Reported impact is XSS; the primary remediation is to upgrade to version 3.5.3 or later. No explicit exploit...