CVE-2024-7916

CVE-2024-7916 is a cross-site scripting (XSS) vulnerability affecting the nafisulbari/itsourcecode Insurance Management System version 1.0. Specifically, it resides in the addNominee.php component, where improper sanitization of the "Nominee-Client ID" argument allows for remote exploitation. Rated as MEDIUM severity with a CVSS score of 5.4, this vulnerability requires low privileges and user interaction (e.g., clicking a malicious link) to achieve low impact on confidentiality and integrity. The attack complexity is low, making it relatively easy to exploit. While the exploit has been publicly disclosed, there is no evidence of active exploitation in the wild, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal.