Description

Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?module=users/login. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Remediation

References

CVE-2022-45020

Related Vulnerabilities

WordPress Plugin Concours Cross-Site Scripting (1.1)

CKEditor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-27193)

WordPress Plugin Timetable and Event Schedule by MotoPress Information Disclosure (2.3.19)

WordPress Plugin Donation Block For PayPal Cross-Site Scripting (2.0.0)

WordPress Plugin DSubscribers SQL Injection (1.2)

Severity

High

Classification

CVE-2022-45020 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H

Tags

Missing Update Known Vulnerabilities