CVE-2023-44486: Online Blood Donation Management System v1.0 - Multiple Stored Cross-Site Scripting (XSS)
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-44486?
CVE-2023-44486 is a vulnerability found in Online Blood Donation Management System v1.0 that allows for multiple stored cross-site scripting (XSS) attacks.
How severe is CVE-2023-44486?
CVE-2023-44486 has a severity rating of 6.1, which is considered medium.
How does CVE-2023-44486 affect Online Blood Donation Management System v1.0?
CVE-2023-44486 affects the 'address' parameter of the users/register.php resource, which is copied into the users/member.php document as plain text between tags and allows for unmodified input to be echoed on the users/member.php page.
What is the Common Weakness Enumeration (CWE) associated with CVE-2023-44486?
The CWE associated with CVE-2023-44486 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
Is there a fix available for CVE-2023-44486?
At the time of this advisory, there is no specific fix available for CVE-2023-44486, but it is recommended to update to a newer version of the Online Blood Donation Management System that addresses this vulnerability.