CVE-2024-25854

Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cve@mitre.org

Published

2024-03-11

Last modified

2024-08-27

Weaknesses

CWE-79

Affected products

• Insurance Management System (Munyweki)
• Insurance Management System (Sourcecodester)

References

• https://github.com/hakkitoklu/hunt/blob/main/Insurance%20Management%20System%20PHP%20and%20MySQL%201.0/xss.md