CVE-2024-4736

CVSS 2.0 Score 4.0 of 10 (medium)

Details

Published May 14, 2024
Updated: Jun 4, 2024
CWE ID 79

Summary

CVE-2024-4736 is a newly disclosed vulnerability affecting the Campcodes Legal Case Management System 1.0. This issue is classified as problematic and involves a cross-site scripting (XSS) vulnerability in an unknown functionality of the /admin/tax file. By manipulating the argument name, an attacker can inject malicious scripts into a victim's web browser, potentially leading to unauthorized access or data theft. The exploit for this vulnerability has been made public, increasing the risk of remote attacks. VDB-263822 is the identifier assigned to this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share