Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1561 State: PUBLISHED Published: 2025-03-13T04:21:05.201Z Last Updated: 2025-03-17T21:29:01.895Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: scottopolis Products: AppPresser – Mobile App Framework Problem Types: CWE-79 Description: The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 4.4.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages when logging is enabled that will execute whenever a user accesses an injected page. A
ct arbitrary web scripts in pages when logging is enabled that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/77328e35-b6e6-40eb-8c85-896d54419aef?source=cve - https://plugins.trac.wordpress.org/browser/apppresser/tags/4.4.10/templates/template.php#L32 - https://plugins.trac.wordpress.org/changeset/3254632/apppresser/tags/4.4.11/inc/AppPresser_Log_Admin.php?old=3219464&old_path=apppresser%2Ftags%2F4.4.10%2Finc%2FAppPresser_Log_Admin.php
CVE ID: CVE-2025-1562 State: PUBLISHED Published: 2025-06-18T07:22:43.948Z Last Updated: 2025-06-18T13:44:42.405Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: amans2k Products: FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce Problem Types: CWE-862 Description: The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible
ivate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/094972e6-7e02-4060-b069-e39c8cde9331?source=cve - https://plugins.trac.wordpress.org/changeset/3305437/wp-marketing-automations/trunk/admin/class-bwfan-admin.php - https://plugins.trac.wordpress.org/browser/wp-marketing-automations/tags/2.5.0/includes/api/plugin_status/class-bwfan-api-install-and-activate-plugin.php - https:
/wp-marketing-automations/tags/2.5.0/includes/api/plugin_status/class-bwfan-api-install-and-activate-plugin.php - https://plugins.trac.wordpress.org/browser/wp-marketing-automations/tags/2.5.0/includes/class-bwfan-db.php#L153 - https://plugins.trac.wordpress.org/changeset/3305437/wp-marketing-automations/trunk/includes/class-bwfan-api-loader.php - https://plugins.trac.wordpress.org/changeset/3305437/wp-marketing-automations/trunk/includes/abstracts/class-bwfan-api-base.php
CVE ID: CVE-2025-1564 State: PUBLISHED Published: 2025-03-01T07:24:05.077Z Last Updated: 2025-03-03T20:56:46.796Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Select-Themes Products: SetSail Membership Problem Types: CWE-288 Description: The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfenc
take over access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c2c2385e-0d1e-435a-9b82-972964084148?source=cve - https://themeforest.net/item/setsail-travel-agency-theme/22832625
CVE ID: CVE-2025-1565 State: PUBLISHED Published: 2025-04-25T09:21:41.127Z Last Updated: 2025-04-25T14:27:57.070Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: TeconceTheme Products: Mayosis Core Problem Types: CWE-22 Description: The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabil
tion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b967eb98-69f8-41c5-a19a-9d20979accb0?source=cve - https://themeforest.net/item/mayosis-digital-marketplace-theme/20210200
CVE ID: CVE-2025-1566 State: PUBLISHED Published: 2025-04-16T23:06:27.847Z Last Updated: 2025-05-08T19:15:06.169Z Vendors: Google Products: ChromeOS Problem Types: Network Security Isolation (NSI) Description: DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/342802975 - https://issues.chromium.org/issues/b/342802975
CVE ID: CVE-2025-1568 State: PUBLISHED Published: 2025-04-16T23:06:28.902Z Last Updated: 2025-05-20T14:33:23.211Z Vendors: Google Products: ChromeOS Problem Types: Code execution Description: Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/374279912 - https://is
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://issuetracker.google.com/issues/374279912 - https://issues.chromium.org/issues/b/374279912
CVE ID: CVE-2025-1569 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:37.740Z Description: No description available.
CVE ID: CVE-2025-1570 State: PUBLISHED Published: 2025-02-28T08:23:17.826Z Last Updated: 2025-02-28T14:48:50.580Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpwax Products: Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings Problem Types: CWE-640 Description: The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset_pin_code() and reset_user_password() functions not having enough controls to prevent a successful brute force atta
reset_pin_code() and reset_user_password() functions not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized user. This makes it possible for unauthenticated attackers to generate and brute force an OTP that makes it possible to change any users passwords, including an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/853562ed-7f2e-453c-b3d0-67c90bd0231f?source=cve - https://plugins.trac.wordpress.org/changeset/3246340/directorist
CVE ID: CVE-2025-1571 State: PUBLISHED Published: 2025-02-28T07:03:47.425Z Last Updated: 2025-02-28T14:00:02.210Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: timstrifler Products: Exclusive Addons for Elementor Problem Types: CWE-79 Description: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Image Comparison Widgets in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web script
s makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/dd2ec0b3-2784-4506-99f4-05187527fe6d?source=cve - https://wordpress.org/plugins/exclusive-addons-for-elementor/#developers - https://plugins.trac.wordpress.org/changeset/3245128/
CVE ID: CVE-2025-1572 State: PUBLISHED Published: 2025-02-28T07:34:38.548Z Last Updated: 2025-02-28T13:57:55.673Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: iqonicdesign Products: KiviCare – Clinic & Patient Management System (EHR) Problem Types: CWE-89 Description: The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the ‘u_id’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with doctor-level access and above, to appe
the existing SQL query. This makes it possible for authenticated attackers, with doctor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eb6b0c35-b478-4616-a708-1fd243c95c14?source=cve - https://plugins.trac.wordpress.org/browser/kivicare-clinic-management-system/trunk/app/controllers/KCPatientController.php#L330 - https://wordpress.org/plugins/kivicare-clinic-management-system/#developers - https://plugins.trac.wordpress.org/browser/kivicare-clinic-management-syst
vicare-clinic-management-system/#developers - https://plugins.trac.wordpress.org/browser/kivicare-clinic-management-system/trunk/app/controllers/KCPatientController.php#L331 - https://plugins.trac.wordpress.org/changeset/3245759/kivicare-clinic-management-system/trunk/app/controllers/KCPatientController.php - https://plugins.trac.wordpress.org/changeset/3245759/
CVE ID: CVE-2025-1573 State: REJECTED Published: N/A Last Updated: 2025-07-05T22:16:37.897Z Description: No description available.
CVE ID: CVE-2025-1575 State: PUBLISHED Published: 2025-02-23T04:00:08.436Z Last Updated: 2025-02-24T12:21:31.243Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Harpia Products: DiagSystem Problem Types: CWE-99 Description: A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an unknown function of the file /diagsystem/PACS/atualatendimento_jpeg.php. The manipulation of the argument cod/codexame leads to improper control of resource identifiers. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not r
oit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296550 - https://vuldb.com/?ctiid.296550 - https://vuldb.com/?submit.497083 - https://drive.google.com/file/d/1zBAwcqfv6-HvDQg6ch3ywbllo0VlLIoQ/view?usp=sharing
CVE ID: CVE-2025-1576 State: PUBLISHED Published: 2025-02-23T04:31:04.929Z Last Updated: 2025-02-24T12:19:59.415Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Real Estate Property Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax_state.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP
e launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296551 - https://vuldb.com/?ctiid.296551 - https://vuldb.com/?submit.502071 - https://github.com/fjl1113/cve/blob/main/sql-fjl.md - https://code-projects.org/
CVE ID: CVE-2025-1577 State: PUBLISHED Published: 2025-02-23T07:00:09.952Z Last Updated: 2025-02-24T12:18:07.667Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /prostatus.php. The manipulation of the argument message leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296552 - https://vuldb.com/?ctiid.296552 - https://vuldb.com/?submit.502087 - https://github.com/heiheiworld/cve/blob/main/xss-h.md - https://code-projects.org/
CVE ID: CVE-2025-1578 State: PUBLISHED Published: 2025-02-23T08:00:13.408Z Last Updated: 2025-05-20T14:35:08.687Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul, Campcodes Products: Online Shopping Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul/Campcodes Online Shopping Portal 2.1. This affects an unknown part of the file /search-result.php. The manipulation of the argument Product leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296553 - https://vuldb.com/?ctiid.296553 - https://vuldb.com/?submit.502391 - https://github.com/panghuanjie/Code-audits/blob/main/PHPGurukul%20Online%20Shopping%20Portal%20v2.1%20Foreground%20SQL%20Injection%20Vulnerability2.pdf
CVE ID: CVE-2025-1579 State: PUBLISHED Published: 2025-02-23T09:00:14.284Z Last Updated: 2025-02-24T12:12:50.097Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Blood Bank System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/user.php. The manipulation of the argument email leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296555 - https://vuldb.com/?ctiid.296555 - https://vuldb.com/?submit.502876 - https://github.com/R2og/cve/blob/main/xss-r2og.md - https://code-projects.org/
CVE ID: CVE-2025-1580 State: PUBLISHED Published: 2025-02-23T10:00:11.420Z Last Updated: 2025-02-24T12:11:30.756Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting pa
The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting parameter names to be affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296556 - https://vuldb.com/?ctiid.296556 - https://vuldb.com/?submit.504234 - https://github.com/wqywfvc/CVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-1581 State: PUBLISHED Published: 2025-02-23T10:31:05.548Z Last Updated: 2025-02-24T14:18:07.795Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /book-nurse.php?bookid=1. The manipulation of the argument contactname leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296557 - https://vuldb.com/?ctiid.296557 - https://vuldb.com/?submit.504450 - https://github.com/wqywfvc/CVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-1582 State: PUBLISHED Published: 2025-02-23T11:31:05.169Z Last Updated: 2025-02-24T14:12:13.332Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Nurse Hiring System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/all-request.php. The manipulation of the argument viewid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296558 - https://vuldb.com/?ctiid.296558 - https://vuldb.com/?submit.504451 - https://github.com/wqywfvc/CVE/issues/11 - https://phpgurukul.com/
CVE ID: CVE-2025-1583 State: PUBLISHED Published: 2025-02-23T12:00:09.133Z Last Updated: 2025-02-24T14:18:55.075Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online Nurse Hiring System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Online Nurse Hiring System 1.0. This affects an unknown part of the file /admin/search-report-details.php. The manipulation of the argument searchinput leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296559 - https://vuldb.com/?ctiid.296559 - https://vuldb.com/?submit.504452 - https://github.com/wqywfvc/CVE/issues/12 - https://phpgurukul.com/
CVE ID: CVE-2025-1584 State: PUBLISHED Published: 2025-02-23T12:31:04.886Z Last Updated: 2025-02-24T14:04:16.596Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: opensolon Products: Solon Problem Types: CWE-24, CWE-23 Description: A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is
k can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296560 - https://vuldb.com/?ctiid.296560 - https://vuldb.com/?submit.504454 - https://github.com/opensolon/solon/issues/332 - https://github.com/opensolon/solon/issues/332#issuecomment-2674330700 - https://github.com/opensolon/solon/issues/332#issue-2866229828 - https://github.com/opensolon/solon/commit/f46e47fd1f8455b9467d7ead3cdb0509115b2ef
on/solon/issues/332#issue-2866229828 - https://github.com/opensolon/solon/commit/f46e47fd1f8455b9467d7ead3cdb0509115b2ef1
CVE ID: CVE-2025-1585 State: PUBLISHED Published: 2025-02-23T14:00:15.155Z Last Updated: 2025-02-24T14:00:31.805Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: otale Products: tale Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in otale tale up to 2.0.5. This issue affects the function OptionsService of the file src/main/resources/templates/themes/default/partial/header.html. The manipulation of the argument logo_url leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supporte
t has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296561 - https://vuldb.com/?ctiid.296561 - https://vuldb.com/?submit.504937 - https://github.com/dragonkeep/cve/blob/main/Tale_Blog_xss.md
CVE ID: CVE-2025-1586 State: PUBLISHED Published: 2025-02-23T14:31:05.192Z Last Updated: 2025-02-24T13:28:10.517Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Blood Bank System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Blood Bank System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /Blood/A-.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296566 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.296566 - https://vuldb.com/?ctiid.296566 - https://vuldb.com/?submit.505124 - https://github.com/1337g/bloodbanksystem_poc/blob/main/xss-gu(1).pdf - https://code-projects.org/