code-projects Blood System 1.0 is vulnerable to Cross Site Scripting (XSS) in /don.php via the city field.