CVE Catalog
CVE-2023-34537
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk1.45%
70th percentile - higher than 70% of all known CVEs
Summary
A Reflected XSS vulnerability was discovered in HotelDruid version 3.0.5, allowing an attacker to inject malicious code into webpage parameters, potentially tricking users in their browsers or exfiltrating data.
Risk Assessment
This vulnerability could lead to user data theft and deception, posing a security risk to the organization.
Recommendation
It is recommended to update to the latest version of HotelDruid and implement appropriate security measures against XSS attacks.
Original NVD description (English source)
A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data.