VULNERABILITY INTELLIGENCE

CVE-2023-53898

CVSS score5.4 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-12-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert iframe and script payloads in application copyright text to execute arbitrary JavaScript in victim browsers.

Weakness classification

  • disclosure@vulncheck.com: CWE-79

Primary references