What’s Vulnerable › Vulnerabilities

CVE-2019-8937

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-17 · updated 2026-06-17
• Weakness: CWE-79

Description

HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and visualizza_tabelle.php.

Affected products

• DigitalDruid.Net HOTELDRUID: 2.3.0

References

• http://packetstormsecurity.com/files/151779/HotelDruid-2.3-Cross-Site-Scripting.html
• https://sourceforge.net/projects/hoteldruid/
• https://www.exploit-db.com/exploits/46429/
• http://packetstormsecurity.com/files/151779/HotelDruid-2.3-Cross-Site-Scripting.html
• https://sourceforge.net/projects/hoteldruid/
• https://www.exploit-db.com/exploits/46429/

Get alerted when CVE-2019-8937 or the next vulnerability affects your stack