CVE-2024-25854

2024-03-1100:00:00

mitre

github.com

cross site scripting

sourcecodester

arbitrary code

support ticket

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sourcecodester:insurance_management_system:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "sourcecodester",
    "product": "insurance_management_system",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]