Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can

APPLICATION

16-12-2025 23:57

CVE-2023-53898 Vulnerabilidad documentada

Sin puntuación

Tags

#site

#cross

#javascript

#java

#iframe

#cross-site

#application

#browser

#/iframe(.*)javascript/iU

#iframe javascript

#cross-site scripting

#attackers

#authenticated

#arbitrary

#scripting

#malicious

#inject

#execute

#allow

#attack

Descripción

Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text execute arbitrary JavaScript victim browsers.

https://www.exploit-db.com/exploits/51548

https://www.rukovoditel.net/

https://www.vulncheck.com/advisories/rukovoditel-multiple-stored-cross-site-scripting-via-configuration

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2023-53898

Resultados similares

Coincidentes en almenos en 50% de los tags

16-12-2025 CVE-2025-14553
Exposure of password hashes through an unauthenticated API response in TP-Link Tapo C210 V.1.8 ...
Ver información

16-12-2025 CVE-2023-53874
GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name in...
Ver información