VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 31, 2023· Updated Jun 17, 2026

CVE-2023-44484

CVE-2023-44484

Description

Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Projectworlds/Online Blood Donation Management System2 versions
    cpe:2.3:a:projectworlds:online_blood_donation_management_system:1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:projectworlds:online_blood_donation_management_system:1.0:*:*:*:*:*:*:*
    • (no CPE)range: <=1.0
  • Projectworlds Pvt. Limited/Online Blood Donation Management Systemv5
    Range: 1.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.