HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
https://security-tracker.debian.org/tracker/CVE-2023-34854
Source: Mitre, NVD
Published: 2026-09-14
Updated: 2026-09-22
Base Score: 6.8
Vector: CVSS2#AV:N/AC:H/Au:M/C:C/I:C/A:C
Severity: Medium
Base Score: 6.6
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.00228
