CVE-2025-55816

HotelDruid versions v3.0.7 and before are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the /modifica_app.php file. The root cause is a lack of sufficient security measures in the _'new image URL'_ functionality, which allows an attacker to inject JavaScript payloads disguise...

CVE-2025-55816

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...