Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Street input field.
CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)