CVE-2023-47164: Digitaldruid Hoteldruid

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.

Affected products

• Digitaldruid Hoteldruid: up to and including 3.0.5

Published 2023-11-10. Last modified 2026-06-17.