CVE-2025-25747

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint...

CVE-2025-25747

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint...

CVE-2025-25747

The DigitalDruid HotelDruid v.3.0.7 property management system is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the lack of sanitization or encoding for the ripristina_backup parameter within the crea_backup.php endpoint, which reflects user input directly into the ...