← back
CVE-2022-26564

CVE-2022-26564

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 2.8%
exploitation probability
2.8%top 15% of all CVEs
observed exploitation
nono source reports it
HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 parameter in creaprezzi.php.
Affected products
n/a · n/a