← All advisories

Medium severity6.1NVD Advisory· Published May 4, 2024· Updated Jun 17, 2026

CVE-2024-34468

CVE-2024-34468

Description

Rukovoditel before 3.5.3 allows XSS via user_photo to My Page.

Affected products

3

Rukovoditel/Rukovoditelllm-fuzzy3 versions
<3.5.3+ 2 more
- (no CPE)range: <3.5.3
- (no CPE)
- cpe:2.3:a:rukovoditel:rukovoditel:*:*:*:*:*:*:*:*range: <3.5.3

Patches

Vulnerability mechanics

References

1

forum.rukovoditel.net/viewtopic.phpnvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.