2019-05-07 18:50:54
mitre
PUBLISHED
Rukovoditel through 2.4.1 allows XSS via a URL that lacks a module=users%2flogin substring.