CVE-2025-55816
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
- Affected products
- Debian, Hoteldruid
- Digitaldruid Hoteldruid
- ≤ 3.0.7
- Fix
- Available
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 0.3% (19th percentile)
- Weakness
- CWE-79
- NVD status
- Analyzed
- Published
- 2025-12-11
CVE-2025-55816 at NVD
1 known exploit for CVE-2025-55816
Proof-of-concept code and exploit modules indexed by Sploitus