CVE-2025-25747

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2025-25747

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-25747.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2025-25747

Downstream

DEBIAN-CVE-2025-25747

UBUNTU-CVE-2025-25747

Published

2025-03-11T16:15:17Z

Modified

2025-05-28T14:47:52Z

Summary

[none]

Details

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint

References

https://www.huyvo.net/post/cve-2025-25747-reflected-xss-vulnerability-in-hoteldruid-3-0-7
https://cwe.mitre.org/data/definitions/79.html

CVE-2025-25747

Affected packages