Skip to content
OpenAdvisories

Vendor

HotelRunner

3 known vulnerabilities.

Products

B2B 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2025-4296

    Open Redirect in HotelRunner's B2B

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025.

    HotelRunner B2B
  • Medium 4.6
    CVE-2025-4295

    Host Header Injection in HotelRunner's B2B

    Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025.

    HotelRunner B2B
  • Medium 4.8
    CVE-2025-4294

    XSS in HotelRunner's B2B

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS). This issue affects B2B: before 04.06.2025.

    HotelRunner B2B