Known vulnerabilities in HotelDruid

Known vulnerabilities in HotelDruid

Vendor: DigitalDruid.Net

Software: HotelDruid

Software CPE: cpe:2.3:a:digitaldruid.net:hoteldruid:*:*:*:*:*:*:*:*

Website: https://www.hoteldruid.com/

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82947 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-47164	CWE-79	Low	No	No	3.0.6	10.11.2023	SB2023111001
#VU81096 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43376	CWE-79	Low	No	No	-	25.09.2023	SB2023092524
#VU81095 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-43373	CWE-89	High	No	No	-	25.09.2023	SB2023092524
#VU81094 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-43374	CWE-89	High	No	No	-	25.09.2023	SB2023092524
#VU81092 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43377	CWE-79	Low	No	No	-	25.09.2023	SB2023092524
#VU81091 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-43375	CWE-79	Low	No	No	-	25.09.2023	SB2023092524
#VU81088 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-43371	CWE-89	High	No	No	-	25.09.2023	SB2023092524
#VU75722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-29839	CWE-79	Low	No	No	-	04.05.2023	SB2023050415
#VU62705 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-26564	CWE-79	Low	No	No	3.0.4	29.04.2022	SB2022042914
#VU60761 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22909	CWE-94	High	Available	No	-	22.02.2022	SB2022022216