CVE-2024-4730

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/judge. The manipulation of the argument judge_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263808.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Legal Case Management System	1.0
campcodes	legal_case_management_system	1.0

References

https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_judge.mdExploit
https://vuldb.com/?ctiid.263808Permissions Required, VDB Entry
https://vuldb.com/?id.263808Permissions Required, VDB Entry
https://vuldb.com/?submit.331994Third Party Advisory, VDB Entry
https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_judge.mdExploit
https://vuldb.com/?ctiid.263808Permissions Required, VDB Entry
https://vuldb.com/?id.263808Permissions Required, VDB Entry
https://vuldb.com/?submit.331994Third Party Advisory, VDB Entry

Timeline

Published: May 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-473007.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Imran Tauqeer CubeWP Forms cubewp-form CVE-2024-473017.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Apps Bit Form bit-form allows Stor CVE-2024-473029.8Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control CVE-2024-473035.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in livemesh Livemesh Addons for Elementor CVE-2024-473048.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shahjahan Jewel Fluent Support fluent-CVE-2024-473058.8Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affect CVE-2024-473067.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection CVE-2024-473076.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Essential Plugin Meta slider and carou CVE-2024-473089.8Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2.CVE-2024-473096.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Condless Cities Shipping Zones for WooCommer CVE-2024-47315.4A vulnerability classified as problematic was found in Campcodes Legal Case Management System 1.0. Affected by this vulnerability is an unkn CVE-2024-473106.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft ARI Fancy Lightbox ari-fancy-l