CVE-2023-53897: Rukovoditel

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts. Attackers can insert XSS payloads in project task comments to execute arbitrary JavaScript in victim browsers.

Affected products

• Rukovoditel Rukovoditel: version 3.4.1 only

Published 2025-12-16. Last modified 2026-06-17.