CVE
CVE-2022-44947
5.4
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.
Description
Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Highlight Row feature at /index.php?module=entities/listing_types&entities_id=24. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note field after clicking "Add".
Attack Vector
Network
Privileges Req.
Low
User Interaction
Required
Updated Oct 24, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →