CVE-2023-41575

https://notcve.org/view.php?id=CVE-2023-41575

Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Full Name, Message, or Address parameters. Múltiples vulnerabilidades de Cross-Site Scripting (XSS) Almacenado en /bbdms/sign-up.php de Blood Bank & Donor Management v2.2 permiten a los atacantes ejecutar scripts web arbitrarios o HTML a través de un payload manipulado inyectado en los parámetros Nombre completo, Mensaje o Dirección. • https://github.com/soundarkutty/Stored-xss/blob/main/poc • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •