CVE-2024-4725
CVSS 2.0 Score 4.0 of 10 (medium)
Details
Published May 14, 2024
Updated: Jun 4, 2024
CWE ID 79
Summary
CVE-2024-4725 is a newly disclosed vulnerability affecting the Campcodes Legal Case Management System 1.0. This issue is classified as problematic due to an unknown functionality in the file /admin/client_user. The vulnerability enables attackers to launch cross-site scripting attacks by manipulating the argument f_name. The exploit can be executed remotely, increasing the threat level. The vulnerability identifier is VDB-263803, and the exploit has already been made public, posing a significant risk to users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.