CVE-2024-7225

Name of the Vulnerable Software and Affected Versions SourceCodester Insurance Management System version 1.0

Description A problematic issue has been found in the Edit Insurance Policy Page component, specifically affecting the /Script/admin/core/update policy file. The manipulation of the pname argument leads to cross-site scripting. This issue can be initiated remotely.

Recommendations For SourceCodester Insurance Management System version 1.0, as a temporary workaround, consider restricting access to the /Script/admin/core/update policy file or disabling the manipulation of the pname argument until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.