2 matches found
CVE-2023-33817
hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
CVE-2023-34537
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data.