← All advisories

High severity7.1NVD Advisory· Published May 4, 2024· Updated Jun 17, 2026

CVE-2024-34469

CVE-2024-34469

Description

Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save.

Affected products

3

Rukovoditel/Rukovoditelllm-fuzzy3 versions
<3.5.3+ 2 more
- (no CPE)range: <3.5.3
- cpe:2.3:a:rukovoditel:rukovoditel:*:*:*:*:*:*:*:*range: <3.5.3
- (no CPE)

Patches

Vulnerability mechanics

References

1

forum.rukovoditel.net/viewtopic.phpnvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.