CVE-2024-31648

A Cross Site Scripting (XSS) vulnerability exists in Insurance Management System v1.0 . Remote attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Category Name parameter at the /core/new_category2 endpoint. This vulnerability is caused by Improper Control ...