Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-53898 1 Rukovoditel 1 Rukovoditel 2026-04-07 5.4 Medium
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
CVE-2023-53897 1 Rukovoditel 1 Rukovoditel 2026-04-07 5.4 Medium
Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert XSS payloads in project task comments to execute arbitrary JavaScript in victim browsers.