← Back to CVE List

CVE-2025-25747

Published: 2025-03-11T16:15Z
Last Modified: 2025-03-12T16:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristina_backup parameter in the crea_backup.php endpoint > MITRE Terms of Use apply – see LICENSE‑MITRE.txt