CVE-2023-34854

HotelDruid versions prior to 3.0.6 are vulnerable due to inadequate file upload sanitation in their backup/restore functionality, allowing attackers to upload malicious files. This could lead to potential remote code execution or unauthorized access to sensitive data. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.