description: Cross-site scripting vulnerability in HOTELDRUID 3.0.5 and earlier allows a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product.
problem types: Cross-site scripting (XSS)
affected:
{
vendor: DigitalDruid.Net
product: HOTELDRUID
versions:
version: 3.0.5 and earlier, status: affected
}