Digitaldruid Hoteldruid vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Digitaldruid Hoteldruid: 2 record(s), with affected versions and fixes.cpe:2.3:a:digitaldruid:hoteldruid
CVE-2023-34854
Medium · 6.6
CWE-434 Sep 14, 2026
Unrestricted Upload of File with Dangerous Type in Digitaldruid Hoteldruid
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
CVE-2025-55816
Medium · 6.1
CWE-79 Dec 11, 2025
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php...
HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.