CVE-2024-25327

2024-03-0700:00:00

mitre

www.cve.org

cross site scripting

justice systems fullcourt enterprise

arbitrary code execution

citation search function

cve-2024-25327

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function.

References

packetstormsecurity.com/files/177500/FullCourt-Enterprise-8.2-Cross-Site-Scripting.html