Cross Site Scripting Vulnerability in Code-Projects Blood System by Code-Projects
CVE-2025-65342

6.1MEDIUM

Key Information:

Vendor

Code-Projects

Status
Blood System
Vendor
CVE Published:
30 July 2026

What is CVE-2025-65342?

The Blood System product by Code-Projects suffers from a Cross Site Scripting (XSS) vulnerability due to improper validation of user input in the city field located in the /don.php script. This flaw allows malicious users to inject arbitrary JavaScript code, potentially leading to unauthorized actions being executed in the context of affected users. It is crucial to address this vulnerability to maintain the integrity and security of user data and prevent exploitation.

References

https://github.com/um-dsp/TaintRadar/blob/main/XSS_cve/bl...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.