CVE-2024-7225: SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-272805 was assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7225?
CVE-2024-7225 has been classified as problematic, indicating potential risks to the affected system.
How do I fix CVE-2024-7225?
To fix CVE-2024-7225, it is recommended to update the SourceCodester Insurance Management System to a patched version that addresses the vulnerability.
What component is affected by CVE-2024-7225?
CVE-2024-7225 affects the Edit Insurance Policy Page within the SourceCodester Insurance Management System.
What is the impact of CVE-2024-7225?
The impact of CVE-2024-7225 involves the manipulation of the pname argument, potentially leading to unauthorized access or modification of insurance policies.
Which version of the software is vulnerable to CVE-2024-7225?
Version 1.0 of the Munyweki Insurance Management System is the vulnerable version for CVE-2024-7225.