Vulnerabilities > CVE-2023-44484 - Unspecified vulnerability in Projectworlds Online Blood Donation Management System 1.0
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |