216.73.217.22

CVE-2026-39541

· Published 08/04/2026 09:16 · Modified 08/04/2026 21:26

Labels: CVE-2026-39541 2026-04-08CVE-2026-39541CWE-79[email protected]

Essential information

Published
08/04/2026 09:16
Modified
08/04/2026 21:26
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking allows Stored XSS.This issue affects Hydra Booking: from n/a through <= 1.1.38.

NVD status

Status
Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
themefic / hydra booking cpe:2.3:a:themefic:hydra_booking:<1.1.39:*:*:*:*:*:*:*

References