CVE-2024-4737: Campcodes Legal Case Management System vendor cross site scripting
First published: Fri May 10 2024(Updated: )
A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/vendor. The manipulation of the argument company_name/mobile leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263823.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Campcodes Legal Case Management System | ||
| Campcodes Legal Case Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-4737?
CVE-2024-4737 has been classified as a problematic vulnerability.
How do I fix CVE-2024-4737?
To fix CVE-2024-4737, ensure proper sanitization and validation of user inputs, especially for the company_name/mobile argument.
What type of vulnerability is CVE-2024-4737?
CVE-2024-4737 is a cross-site scripting (XSS) vulnerability affecting Campcodes Legal Case Management System.
Which software versions are affected by CVE-2024-4737?
CVE-2024-4737 affects version 1.0 of Campcodes Legal Case Management System.
Where is the vulnerability CVE-2024-4737 located in the software?
CVE-2024-4737 is located in the /admin/vendor part of the Campcodes Legal Case Management System.
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/campcodes
- canonical/campcodes legal case management system
- version/campcodes legal case management system/1.0