CVE-2023-5306 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-5306 PUBLISHED CVSS 6.099999904632568 MEDIUM

Online Blood Donation Management System v1.0 is vulnerable to multiple Store Cross-Site Scripting vulnerabilities. The 'city' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.

EPSS 0.04% · 12.0th percentile

Risk Scores

CVSS v3.1

6.099999904632568

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

0.04%

12.0th percentile

Timeline

Oct 31, 2023 CVE Published
Nov 1, 2023 EPSS Score
Nov 1, 2023 PoC Published
Nov 17, 2023 EPSS Score
Dec 3, 2023 EPSS Score
Dec 20, 2023 EPSS Score
Jan 5, 2024 EPSS Score
Feb 19, 2024 EPSS Score
Mar 6, 2024 EPSS Score
Mar 23, 2024 EPSS Score
Apr 8, 2024 EPSS Score
Apr 24, 2024 EPSS Score

References

Open in Interactive Console →