CVE-2024-31064
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A Cross Site Scripting (XSS) vulnerability in Insurance Management System version 1.0.0 and earlier allows a remote attacker to execute arbitrary JavaScript code in the victim's browser via the "First Name" input field.
Risk Assessment
An attacker can hijack user sessions, steal sensitive data, or perform other malicious actions within the application context, posing a serious threat to data confidentiality and integrity.
Recommendation
Immediately update the system to the latest version and implement input validation and output encoding (e.g., HTML encoding) for all form fields.
Original NVD description (English source)
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field.