CVE-2025-55816

Medium · 6.1

CVSS

6.1

EPSS

0.3%

Published

Dec 11, 2025

CISA due date

—

The record

HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.

Ecosystem	Package	Introduced	Fixed