CVE-2019-7400

Rukovoditel before 2.4.1 allows XSS.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-02-05

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Rukovoditel (Rukovoditel)

References

• http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html
• https://blog.rukovoditel.net/rukovoditel-2-4-1/
• https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/
• https://www.exploit-db.com/exploits/46608/