Description

A cross-site scripting (XSS) vulnerability exists in the Blood Bank Management System 1.0 within the blooddinfo.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the error parameter, which is then executed in the victim's browser when the page is viewed.

INFO

Published Date :

2025-12-01T00:00:00.000Z

Last Modified :

2025-12-01T19:36:49.757Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-63528 vulnerability.

Vendors Products
Blood Bank Management System Project
  • Blood Bank Management System
Shridharshukl
  • Blood Bank Management System

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Complexity
Attack Vector
Availability Impact
Confidentiality Impact
Integrity Impact
Privileges Required
Scope
User Interaction