4 matches found
CVE-2023-43378
A cross-site scripting XSS vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the commento11 parameter...
CVE-2023-43378
A cross-site scripting XSS vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the commento11 parameter...
CVE-2023-43378
A cross-site scripting XSS vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the commento11 parameter...
CVE-2023-43378
A cross-site scripting (XSS) vulnerability exists in Hoteldruid v3.0.5 due to improper neutralization of input. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the commento1_1 parameter, which may allow them to manipulate web content or steal user data. Whi...