CVE-2025-65342 identifies a Cross Site Scripting (XSS) vulnerability in code-projects Blood System 1.0 specifically in the /don.php page through the city input field. This vulnerability enables injection of malicious scripts, potentially leading to client-side code execution when a victim accesses the affected page. The CVE record does not provide a CVSS score, remediation details, or affected version specifics. No known exploits have been reported.

Successful exploitation of this XSS vulnerability could allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to session hijacking, defacement, or redirection to malicious sites. However, no active exploitation has been reported, and the scope of impact depends on the application's usage and user interaction with the vulnerable parameter.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation and output encoding on the city field to mitigate XSS risks. Monitor vendor channels for updates regarding patches or official mitigations.