CVE-2022-45020: Rukovoditel

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Rukovoditel v3.2.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in the component /rukovoditel/index.php?module=users/login. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted GET request.

Affected products

• Rukovoditel Rukovoditel: version 3.2.1 only

Published 2022-12-05. Last modified 2026-06-17.