Unrated severityNVD Advisory· Published Dec 16, 2025· Updated Apr 7, 2026
Rukovoditel 3.4.1 Multiple Stored Cross-Site Scripting via Configuration
CVE-2023-53898
Description
Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.
Affected products
2- Range: = 3.4.1
- Rukovoditel/Rukovoditelv5Range: 3.4.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/51548mitreexploit
- www.vulncheck.com/advisories/rukovoditel-multiple-stored-cross-site-scripting-via-configurationmitrethird-party-advisory
- www.rukovoditel.netmitreproduct
News mentions
0No linked articles in our index yet.