CVE-2023-46020

MEDIUM 6.1CVE-2023-46020 · Published 13/11/2023 · updated 17/06/2026

In short

CVE-2023-46020 is a MEDIUM (CVSS 6.1) vulnerability affecting blood bank (code-projects).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
blood bank code-projects	`= 1.0`	No fix yet

Description

Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters.

References

ersinerenler/CVE-2023-46020-Code-Projects-Blood-Bank-1.0-Stored-Cross-Site-Scripting-Vulnerability · Exploit

More vulnerabilities in blood bank

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

blood bank

code-projects

= 1.0

No fix yet

More vulnerabilities in blood bank

See all →