CVE-2024-25327

Cross Site Scripting XSS vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function...

CVE-2024-25327

Cross Site Scripting XSS vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function...

CVE-2024-25327

Justice Systems FullCourt Enterprise v.8.2 is vulnerable to a Cross-Site Scripting (XSS) flaw within the Citation search function. A remote attacker can exploit the formatCaseNumber parameter to inject and execute arbitrary scripts, which may allow for redirecting victims, creating pop-ups, or lo...

PT-2024-20890 · Justice Systems · Justice Systems Fullcourt Enterprise

Name of the Vulnerable Software and Affected Versions: Justice Systems FullCourt Enterprise version 8.2 Description: A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function. This enables the attacker to...