Description
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Add New Form tab function at /index.php?module=entities/forms&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP htaccess Control Unspecified Vulnerability (2.4)
MySQL Other Vulnerability (CVE-2006-1517)
WordPress Plugin Backup and Staging by WP Time Capsule Security Bypass (1.21.15)
Contao Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2021-37626)
WordPress Plugin Localize My Post Local File Inclusion (1.0)