CVE-2024-0476

A vulnerability, which was classified as problematic, was found in Blood Bank & Donor Management 1.0. This affects an unknown part of the file request-received-bydonar.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250581 was assigned to this vulnerability.

More information : https://drive.google.com/file/d/1Hvv_oKuEplp4DTcOf9xImgyPt58a8jGz/view?usp=sharing

Attack vector : NETWORK
Attack complexity : LOW
Privileges required : HIGH
User interaction : REQUIRED
Confidentiality impact : LOW
Integrity impact : LOW
Base score : 4.8
Base severity : MEDIUM
Exploitability score : 1.7
Impact score : 2.7