Cross-Site Scripting Vulnerability in Blood Bank Management System by Unknown Vendor

CVE-2025-63526

What is CVE-2025-63526?

The Blood Bank Management System contains a cross-site scripting vulnerability within its abs.php component. This flaw arises from inadequate sanitization of user-supplied input before it's rendered on web pages. As a consequence, attackers can exploit this vulnerability to inject harmful JavaScript code into the msg parameter. When users access the affected page, their browsers may execute this injected script, resulting in compromised user data and possible session hijacking.

References