Medium severity6.1NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026
CVE-2024-42560
CVE-2024-42560
Description
A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter.
Affected products
2- cpe:2.3:a:varunsardana004:blood_bank_and_donation_management_system:*:*:*:*:*:*:*:*Range: <=2021-03-18
- Blood Bank And Donation Management System/Blood Bank And Donation Management Systemdescription
Patches
Vulnerability mechanics
References
1- gist.github.com/topsky979/4c05ee72ab4b365ef81c199aaa0558d0nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.