CVE-2024-4727

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/court-type. The manipulation of the argument court_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263805 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Legal Case Management System	1.0
campcodes	legal_case_management_system	1.0

References

https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_court-type.mdExploit
https://vuldb.com/?ctiid.263805Permissions Required, VDB Entry
https://vuldb.com/?id.263805Permissions Required, VDB Entry
https://vuldb.com/?submit.331990Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_court-type.mdExploit
https://vuldb.com/?ctiid.263805Permissions Required, VDB Entry
https://vuldb.com/?id.263805Permissions Required, VDB Entry
https://vuldb.com/?submit.331990Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-472702.7Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9 CVE-2024-472714.9Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 CVE-2024-472722.7Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows r CVE-2024-472734.3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyp CVE-2024-47285.4A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unk CVE-2024-47295.4A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown p CVE-2024-472905.5Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-472915.5Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availab CVE-2024-472925.5Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentialit CVE-2024-472937.5Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-472947.5Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may CVE-2024-472958.1Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary passwor