CVE-2024-25854: XSS
Published Mar 11, 2024
·Updated
Cross Site Scripting (XSS) vulnerability in Sourcecodester Insurance Management System 1.0 allows attackers to run arbitrary code via the Subject and Description fields when submitting a support ticket.
Affected Software
2 affected components
Sourcecodester Insurance Management System
Munyweki Insurance Management System=1.0
Event History
Mar 11, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-25854?
CVE-2024-25854 is classified as a high severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-25854?
To fix CVE-2024-25854, sanitize and validate input in the Subject and Description fields of the support ticket submission.
3
What systems are affected by CVE-2024-25854?
CVE-2024-25854 affects Sourcecodester Insurance Management System version 1.0.
4
What types of attacks can CVE-2024-25854 facilitate?
CVE-2024-25854 can facilitate XSS attacks that allow attackers to run arbitrary code in the context of a user's browser.
5
How can I mitigate the risks associated with CVE-2024-25854?
To mitigate the risks of CVE-2024-25854, ensure that user input is escaped when displayed in the application.