CVE-2020-21732

MediumCVSS 6.1

Published: 14/09/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

47th percentile - higher than 47% of all known CVEs

Summary

Rukovoditel Project Management app version 2.6 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can inject JavaScript code into the filename.

Risk Assessment

The risk involves the execution of malicious scripts in the victim's browser, potentially leading to session theft, redirects, or data theft.

Recommendation

It is recommended to immediately update the Rukovoditel application to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename.