CVE-2024-31062 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Insurance Management System

CWE-80 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)3 documents3 sources
Severity
6.3MEDIUMNVD
EPSS
1.6%
top 18.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Munyweki Insurance Management System
Timeline
PublishedMar 28

Description

Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2024-31062: Cross Site Scripting vulnerability in Insurance Mangement System v↗2024-03-28
▶
GHSA
GHSA-96hc-g58p-3pq7: Cross Site Scripting vulnerability in Insurance Mangement System v↗2024-03-28
▶
CVE-2024-31062 — MEDIUM severity | cvebase