CVE-2026-57388

The vulnerability in Themefic Hydra Booking allows for stored cross-site scripting (XSS) due to improper input neutralization during web page generation, impacting versions up to and including 1.1.44. This flaw can lead to the execution of malicious scripts in users' browsers, potentially compromising sensitive data and user sessions. Organizations using affected versions should prioritize remediation to mitigate the risk of exploitation.