CVE-2024-34469

Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save

High · published May 4, 2024

CVSS v3.1
7.1
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Published
2024-05-04T00:00Z
EPSS history
Timeline
  • 04 MAY 00:00Z
    Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save
    cvelistv5