<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: blood bank and donation management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-11481: A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9</title><link>https://patchthecve.com/cve/CVE-2025-11481.html</link><guid>https://patchthecve.com/cve/CVE-2025-11481.html</guid><pubDate>Thu, 08 Oct 2026 13:10:00 +0000</pubDate><description>MEDIUM 6.3: A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-System up to dc9e0393d826fbc85fad9755b5bc12cba1919df2. The impacted element is an unknown function of the file /donate_blood.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be p</description></item><item><title>CVE-2024-45985: A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System </title><link>https://patchthecve.com/cve/CVE-2024-45985.html</link><guid>https://patchthecve.com/cve/CVE-2024-45985.html</guid><pubDate>Wed, 17 Jun 2026 07:55:06 +0000</pubDate><description>MEDIUM 4.7: A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allows an attacker to inject malicious scripts via the name parameter of the update_contact.php</description></item><item><title>CVE-2024-45984: A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 a</title><link>https://patchthecve.com/cve/CVE-2024-45984.html</link><guid>https://patchthecve.com/cve/CVE-2024-45984.html</guid><pubDate>Wed, 17 Jun 2026 07:55:05 +0000</pubDate><description>MEDIUM 4.7: A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed.</description></item><item><title>CVE-2024-42560: A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation</title><link>https://patchthecve.com/cve/CVE-2024-42560.html</link><guid>https://patchthecve.com/cve/CVE-2024-42560.html</guid><pubDate>Wed, 17 Jun 2026 07:49:38 +0000</pubDate><description>MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Management System commit dc9e039 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Details parameter.</description></item></channel></rss>