7 results · Clear filters · Feed
-
Medium 6.6
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
-
Medium 6.1CVE-2025-55816 Public exploit
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HT…
-
Medium 5.4CVE-2025-25747 Public exploit
Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and …
-
Medium 5.4
A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows attackers to execute …
-
Medium 5.4
A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid v3.0.5 allows attacker…
-
Medium 5.4CVE-2023-29839 Public exploit
A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows a…