CVE-2023-43376

Summary

CVE-2023-43376 is a newly identified cross-site scripting (XSS) vulnerability that affects Hoteldruid v3.0.5. This issue resides in the /hoteldruid/clienti.php file and can be exploited by attackers to inject arbitrary web scripts or HTML code into the nometipotariffa1 parameter. Successful exploitation of this flaw could result in unauthorized access to user data or session hijacking. To mitigate this risk, users are advised to update their Hoteldruid installation to a patched version as soon as possible. Meanwhile, input validation and output encoding should be implemented as an additional security measure against XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.