Rukovoditel before 2.4.1 allows XSS.Referenceshttps://blog.rukovoditel.net/rukovoditel-2-4-1/https://www.exploit-db.com/exploits/46608/http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.htmlhttps://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/