CVE-2025-55816

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...

CVE-2025-55816

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting XSS in the /modificaapp.php file...

CVE-2025-55816

HotelDruid versions 3.0.7 and before are vulnerable to Stored Cross Site Scripting (XSS) in the /modifica_app.php file. An attacker can inject a javascript payload disguised as a URL via the 'New Photo Url' feature due to insufficient security measures. The vulnerability is located in the www mod...