CVE-2024-7916

Summary

CVE-2024-7916 is a newly disclosed vulnerability affecting the Add Nominee Page component of nafisulbari/itsourcecode Insurance Management System 1.0. This issue lies within the file addNominee.php and is triggered by manipulating the Nominee-Client ID argument. The exploit results in cross-site scripting (XSS), allowing attackers to inject malicious code into a victim's web browser. The attack can be executed remotely, increasing the potential threat. Unfortunately, the vulnerability details have been made public, increasing the risk of exploitation. Despite early notification, the vendor has not responded to address the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.