CVE-2024-7303

Name of the Vulnerable Software and Affected Versions itsourcecode Online Blood Bank Management System version 1.0

Description A problem was found in the processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross site scripting. The attack may be initiated remotely.

Recommendations For itsourcecode Online Blood Bank Management System version 1.0, consider restricting access to the /request.php file until a patch is available. As a temporary workaround, avoid using the Address/bloodgroup argument in the Send Blood Request Page to minimize the risk of exploitation.