CVE-2023-29839

A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vulnerable fields are Surname, Name, and Nickname in the Document function.

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.66% chance of exploitation in the next 30 days, 51st percentile

Published

2023-05-03

Updated

2025-01-30

Proof-of-concept exploits (1)

• jichngan/CVE-2023-298391★ · 2023-05-26

References

• CVE Record
• NVD entry