Unrated severityNVD Advisory· Published Dec 16, 2025· Updated Apr 7, 2026
Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration
CVE-2023-53898
Description
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2= 3.4.1+ 1 more
- (no CPE)range: = 3.4.1
- (no CPE)range: 3.4.1
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51548mitreexploit
- www.vulncheck.com/advisories/rukovoditel-multiple-stored-cross-site-scripting-via-configurationmitrethird-party-advisory
- www.rukovoditel.netmitreproduct
News mentions
0No linked articles in our index yet.