CVE-2024-31648

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p40

Published

Apr 15, 2024 (Apr 15, 2024)

Modified

Jun 17, 2026

Description

Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter at /core/new_category2.

Vendors: munyweki
Products: insurance management system
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.