CVE-2024-34321: XSS
Published Oct 13, 2026
·Updated
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.
Affected Software
1 affected component
ProPhoenix Law RMS=2022.2403.3.101
Event History
Oct 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:17 PM
Description
Frequently Asked Questions
1
Which inputs and endpoint should defenders review for exposure?
The reported reflected XSS is in the PageTitle and Notes parameters on the Notes.aspx endpoint of ProPhoenix Law RMS v2022.2403.3.101. Review whether this endpoint accepts and reflects those parameters without appropriate output encoding.
2
What configuration or access conditions are required for exploitation?
The provided information does not state whether authentication is required, whether the endpoint is exposed by default, or what user interaction is needed.