Medium severity5.4NVD Advisory· Published Dec 16, 2025· Updated Jun 17, 2026
CVE-2023-53898
CVE-2023-53898
Description
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<3.4.1+ 2 more
- (no CPE)range: <3.4.1
- (no CPE)range: 3.4.1
- cpe:2.3:a:rukovoditel:rukovoditel:3.4.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51548nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/rukovoditel-multiple-stored-cross-site-scripting-via-configurationnvdExploitThird Party Advisory
- www.rukovoditel.netnvdProduct
News mentions
0No linked articles in our index yet.