CVE-2019-7541: Rukovoditel

Medium severity, CVSS 6.1. EPSS: 3.2% chance of exploitation in the next 30 days.

Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.

Affected products

• Rukovoditel Rukovoditel: up to and including 2.4.1

Published 2019-05-07. Last modified 2026-06-17.