PT-2025-48456 · Unknown · Blood Bank Management System

CVE-2025-63526

·

Publicado

2025-12-01

·

Atualizado

2025-12-01

CVSS v3.1

8.5

Alta

VetorAC:L/AV:N/A:N/C:H/I:L/PR:L/S:C/UI:N
Name of the Vulnerable Software and Affected Versions Blood Bank Management System (affected versions not specified)
Description The Blood Bank Management System is susceptible to a cross-site scripting (XSS) issue within the abs.php component. The application does not adequately sanitize or encode user-provided input before displaying it. An attacker can inject malicious JavaScript payloads into the msg parameter. When a user views the affected page, this injected code is executed in their browser.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-63526

Produtos afetados

Blood Bank Management System