Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS)
CVE-2023-44484

6.1MEDIUM

Key Information:

Vendor

Projectworlds Pvt. Limited

Status
Online Blood Donation Management System
Vendor
CVE Published:
31 October 2023

What is CVE-2023-44484?

Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.

Affected Version(s)

Online Blood Donation Management System 1.0

References

https://fluidattacks.com/advisories/carpenter/
https://projectworlds.in/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.