8 matches found
CVE-2024-34469
CVE-2024-34469 Rukovoditel up to 3.5.3 version is affected to cross-site scripting attack XSS The payload can be embedded in two places, on the registration page and in the user’s personal account with any privileges. The vulnerability is in the userphoto parameter. 1. Editing the personal accoun...
CVE-2024-34468
Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...
CVE-2024-34468
Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...
CVE-2024-34469
Rukovoditel before 3.5.3 allows XSS via userphoto to index.php?module=users/registration&action=save...
CVE-2024-34468
Rukovoditel before 3.5.3 allows XSS via userphoto to My Page...
CVE-2024-34468
CVE-2024-34468 affects Rukovoditel prior to 3.5.3. The issue is an input handling failure in the user_photo parameter that enables a cross-site scripting (XSS) payload in the My Page view. Reported impact is XSS; the primary remediation is to upgrade to version 3.5.3 or later. No explicit exploit...
