CVE-2023-29839

Published May 3rd, 2023

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function.

jichngan/CVE-2023-29839

Hotel Druid 3.0.4 Stored Cross Site Scripting Vulnerability

GitHub