CVE-2024-25327

2024-03-0800:15:49

[email protected]

web.nvd.nist.gov

cross site scripting

justice systems

arbitrary code

citation search

remote attacker

formatcasenumber parameter

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function.

References

packetstormsecurity.com/files/177500/FullCourt-Enterprise-8.2-Cross-Site-Scripting.html