CVE-2021-37833: Digitaldruid Hoteldruid

Medium severity, CVSS 6.1. EPSS: 4.9% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability exists in multiple pages in version 3.0.2 of the Hotel Druid application that allows for arbitrary execution of JavaScript commands.

Affected products

Published 2021-08-03. Last modified 2026-06-17.