3 matches found
CVE-2019-8937
HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...
6.1CVSS6.3AI score0.10633EPSS
SaveExploits5References4
CVE-2019-8937
HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizzatabelle.php...
6.1CVSS6AI score0.10633EPSS
SaveExploits5References3
CVE-2019-8937
HotelDruid 2.3.0 is affected by a Cross-Site Scripting vulnerability (CVE-2019-8937) affecting parameters nsextt, cambia1, mese_fine, origine, and anno in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php. The root cause is improper input handling allowing injected script...
6.1CVSS5.8AI score0.10633EPSS
SaveExploits5References3Affected Software1
20