CVE-2023-34537

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-34549.8Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary cod CVE-2023-345409.8Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIR CVE-2023-345419.8Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.CVE-2023-345459.8A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.CVE-2023-345489.8Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.CVE-2023-34559.1Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity.CVE-2023-345518.0In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server can allow an authentic CVE-2023-345528.8In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type functions of the SADP m CVE-2023-345536.5An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack.CVE-2023-34565.3Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service c CVE-2023-345619.8A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering CVE-2023-345639.8netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.