CVE-2026-111942

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-111942

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111942.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-111942

Published

2026-10-18T06:15:07Z

Modified

2026-10-19T02:45:26Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

hrisikeshpal Blood_Bank_Management_System abs.php cross site scripting

Details

A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-79",
        "CWE-94"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111942.json"
}

References

Affected packages

Git / github.com/hrisikeshpal/blood_bank_management_system

Affected ranges

Type

GIT

Repo

https://github.com/hrisikeshpal/blood_bank_management_system

Events

Introduced

a6e01fb0fa5a76e1c6c2b72a3d2cb11ed9337418

Last Affected

a6e01fb0fa5a76e1c6c2b72a3d2cb11ed9337418

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "1.0.0"
        },
        {
            "last_affected":  "1.0.0"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

1.*

1.0.0

v1.*

v1.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111942.json"