Skip to content
OpenAdvisories

Vendor

Rukovoditel

5 known vulnerabilities.

Products

Rukovoditel 3 Rukovoditel CRM 1 Project Management App 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-31845

    Rukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint

    A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/tel/zadarma.php). The application directly reflects user-supplied input from the 'zd_echo' GET parameter into …

    Rukovoditel Rukovoditel CRM