CVE-2023-44484: Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS)
Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-44484.
What is the title of this vulnerability?
The title of this vulnerability is 'Online Blood Donation Management System v1.0 - Multiple Stored Cross-Site Scripting (XSS)'.
What is the severity of CVE-2023-44484?
The severity of CVE-2023-44484 is medium with a severity value of 6.1.
What is the affected software of CVE-2023-44484?
The affected software of CVE-2023-44484 is 'Projectworlds Online Blood Donation Management System v1.0'.
How can I fix CVE-2023-44484?
To fix CVE-2023-44484, it is recommended to sanitize and validate all user-supplied input to prevent the execution of malicious scripts.