CVE-2024-45985

A Cross Site Scripting (XSS) vulnerability exists in the Blood Bank and Donation Management System v1.0 within the update_contact.php file. An attacker can inject malicious scripts by exploiting the name parameter of the update_contact.php endpoint. This vulnerability allows for the execution of ...