CVE-2023-43378
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Apr 22, 2025
Updated: Apr 23, 2025
CWE ID 79
Summary
CVE-2023-43378 is a newly identified cross-site scripting (XSS) vulnerability affecting Hoteldruid version 3.0.5. This issue permits attackers to inject malicious web scripts or HTML code into the commento1_1 parameter, enabling them to execute arbitrary code in the context of affected users' browsers. Successful exploitation could lead to information disclosure, session hijacking, or other malicious actions. Users are advised to update to the latest Hoteldruid version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.