Code-Projects Blood Bank System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Code-Projects Blood Bank System version 1.0. The issue resides in the file '/BBfile/Blood/o+.php', where the 'Bloodname' argument is manipulated, allowing for the injection of malicious scripts. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to '/Blood/O+.php' with a crafted 'Bloodname' parameter that includes the desired script payload. The injected script will be executed, demonstrating the cross-site scripting vulnerability.