CVE-2023-47164

2023-11-1008:59:13

jpcert

www.cve.org

cve-2023-47164

cross-site scripting

remote unauthenticated attacker

arbitrary script execution

web browser

user login

0.001 Low

EPSS

Percentile

33.3%

JSON

Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

CNA Affected

[
  {
    "vendor": "DigitalDruid.Net",
    "product": "HOTELDRUID",
    "versions": [
      {
        "version": "3.0.5 and earlier",
        "status": "affected"
      }
    ]
  }
]