CVE-2024-34326: XSS
Published Oct 13, 2026
·Updated
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/MsgType parameter in the errorHandler.aspx endpoint.
Affected Software
1 affected component
ProPhoenix Law RMS=2022.2403.3.101
Event History
Oct 13, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:17 PM
Description
Frequently Asked Questions
1
Which endpoint and inputs should be prioritized for testing?
Prioritize the errorHandler.aspx endpoint and test the PageTitle, Alert, and MsgType parameters for reflected script execution.
2
Which product version is confirmed affected?
The reported affected version is ProPhoenix Law RMS v2022.2403.3.101. The provided information does not establish whether earlier, later, or other versions are affected.
3
What should teams look for when assessing potential exposure?
Review requests to errorHandler.aspx that include PageTitle, Alert, or MsgType values, especially values containing HTML or JavaScript-like characters. The provided information does not state logging indicators or confirmed exploitation evidence.