CVE-2024-36599

CVE-2024-36599 describes a stored XSS vulnerability in Aegon Life v1.0 where an attacker can inject arbitrary scripts via the name parameter in insertClient.php. Affected software: Aegon Life Life Insurance Management System (v1.0). Root cause: insufficient input validation/output encoding in the...