Vulnerability in Insurance Management System 1.0 Could Lead to Cross-Site Scripting Attacks

CVE-2024-8208

What is CVE-2024-8208?

A vulnerability has been identified in the nafisulbari/itsourcecode Insurance Management System version 1.0 that allows for cross-site scripting (XSS). The issue arises from improper handling of the AGENT ID parameter in the editClient.php file. This weakness can be exploited remotely, potentially allowing attackers to inject malicious scripts that could execute in the context of the user's browser. The nature of this flaw raises concerns for both user data integrity and system security. The vendor had been informed prior to the public disclosure but has not provided a response.

References