First published: Fri May 10 2024(Updated: )
A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/case-type. The manipulation of the argument case_type_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263802 is the identifier assigned to this vulnerability.
Credit: cna@vuldb.com
Affected Software | Affected Version | How to fix |
---|---|---|
Campcodes Legal Case Management System | ||
Campcodes Legal Case Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-4724 is classified as a problematic vulnerability affecting the Campcodes Legal Case Management System.
CVE-2024-4724 allows for cross-site scripting due to manipulation of the argument case_type_name in the /admin/case-type function.
Exploitation of CVE-2024-4724 can lead to unauthorized actions being executed in the context of the affected user's browser.
To mitigate CVE-2024-4724, sanitize and validate all user inputs related to the case_type_name argument.
CVE-2024-4724 specifically affects version 1.0 of the Campcodes Legal Case Management System.