Vulnerabilities > Digitaldruid > Hoteldruid > 2.3.1

DATE CVE VULNERABILITY TITLE RISK
2023-11-10 CVE-2023-47164 Cross-site Scripting vulnerability in Digitaldruid Hoteldruid
Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
network
low complexity
digitaldruid CWE-79
6.1
6.1
2022-09-16 CVE-2021-42948 Cleartext Transmission of Sensitive Information vulnerability in Digitaldruid Hoteldruid
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
network
high complexity
digitaldruid CWE-319
3.7
3.7