CVE-2024-7321

MEDIUM

Adonesevangelista Online Blood Bank Management System - XSS

Title source: rule

Description

A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulnerability affects unknown code of the file signup.php of the component User Registration Handler. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-273232.

Exploits (1)

github WRITEUP
by cl4irv0yance · poc
https://github.com/cl4irv0yance/CVEs/tree/main/CVE-2024-7321

Scores

CVSS v3 4.3
EPSS 0.0021
EPSS Percentile 43.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
adonesevangelista/online_blood_bank_management_system 1.0
Published Jul 31, 2024
Tracked Since Feb 18, 2026