CVE-2024-4729

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/expense-type. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263807.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Legal Case Management System	1.0

References

https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_expense-type.mdExploit
https://vuldb.com/?ctiid.263807Permissions Required, VDB Entry
https://vuldb.com/?id.263807Permissions Required, VDB Entry
https://vuldb.com/?submit.331993Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_expense-type.mdExploit
https://vuldb.com/?ctiid.263807Permissions Required, VDB Entry
https://vuldb.com/?id.263807Permissions Required, VDB Entry
https://vuldb.com/?submit.331993Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-472905.5Input validation vulnerability in the USB service module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-472915.5Permission vulnerability in the ActivityManagerService (AMS) module Impact: Successful exploitation of this vulnerability may affect availab CVE-2024-472925.5Path traversal vulnerability in the Bluetooth module Impact: Successful exploitation of this vulnerability may affect service confidentialit CVE-2024-472937.5Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability.CVE-2024-472947.5Access permission verification vulnerability in the input method framework module Impact: Successful exploitation of this vulnerability may CVE-2024-472958.1Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary passwor CVE-2024-472977.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople CP Polls cp-polls allows Re CVE-2024-472985.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in boldthemes Bold Page Builder bold-page CVE-2024-472995.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeedProd Coming Soon Page, Under Const CVE-2024-47305.4A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of t CVE-2024-473007.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP Forms cubewp-form CVE-2024-473017.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stor