CVE-2023-34537

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data.

Affected products

Debian, Hoteldruid

Digitaldruid Hoteldruid

= 3.0.5

CVSS 3.1

5.4 MEDIUM

EPSS

1.4% (71th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2023-06-13