CVE-2023-46016

2023-11-1300:00:00

mitre

github.com

cross site scripting

code-projects blood bank

arbitrary code execution

application url parameter

AI Score

6.6

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the ‘search’ parameter in the application URL.

References

github.com/ersinerenler/CVE-2023-46016-Code-Projects-Blood-Bank-1.0-Reflected-Cross-Site-Scripting-Vulnerability