Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-4710 State: PUBLISHED Published: 2024-05-21T06:49:43.461Z Last Updated: 2024-08-01T20:47:41.702Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: SevenSpark Products: UberMenu Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The UberMenu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ubermenu-col, ubermenu_mobile_close_button, ubermenu_toggle, ubermenu-search shortcodes in all versions up to, and including, 3.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat
insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/96161594-9513-49f7-91ab-9ad05b900a81?source=cve - https://codecanyon.net/item/ubermenu-wordpress-mega-menu-plugin/154703
CVE ID: CVE-2024-4711 State: PUBLISHED Published: 2024-06-01T02:32:47.560Z Last Updated: 2024-08-01T20:47:41.665Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: connekthq Products: WordPress Infinite Scroll – Ajax Load More Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level
ient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e86c080d-202c-4c41-b9cc-c35249aabba5?source=cve - https://plugins.trac.wordpress.org/browser/ajax-load-more/trunk/core/classes/class-alm-shortcode.php#L1191 - https://plugins.trac.wordpress.org/browser/ajax-load-more/trunk/build/frontend/ajax-load-more.js - https://plugins.trac.wordpress.org/changeset?sfp_
ss.org/browser/ajax-load-more/trunk/build/frontend/ajax-load-more.js - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3095200%40ajax-load-more&new=3095200%40ajax-load-more&sfp_email=&sfph_mail=#file3
CVE ID: CVE-2024-4712 State: PUBLISHED Published: 2024-05-14T00:13:47.600Z Last Updated: 2024-09-26T01:27:50.169Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: PaperCut Products: PaperCut NG, PaperCut MF Problem Types: CWE-77 Description: An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabled. This specific flaw exists within the image-handler process, which can incorrectly create files that don’t exist when a maliciously formed payload is provided. This can lead to local privilege escalation. Note: This CVE has been split into two (CVE-2024-4712 and CVE-2024-8405) and it’s been rescored wit
rivilege escalation. Note: This CVE has been split into two (CVE-2024-4712 and CVE-2024-8405) and it’s been rescored with a "Privileges Required (PR)" rating of low, and “Attack Complexity (AC)” rating of low, reflecting the worst-case scenario where an Administrator has granted local login access to standard network users on the host server. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.papercut.com/kb/Main/Security-Bulletin-May-2024/
CVE ID: CVE-2024-4713 State: PUBLISHED Published: 2024-05-10T10:00:04.488Z Last Updated: 2024-08-01T20:47:41.664Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/all_teacher.php. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is V
tely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263791. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263791 - https://vuldb.com/?ctiid.263791 - https://vuldb.com/?submit.331879 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2036.pdf
CVE ID: CVE-2024-4714 State: PUBLISHED Published: 2024-05-10T11:00:05.552Z Last Updated: 2024-08-01T20:47:41.651Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Campcodes Complete Web-Based School Management System 1.0. Affected by this issue is some unknown functionality of the file /model/update_subject.php. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability
e launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263792. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263792 - https://vuldb.com/?ctiid.263792 - https://vuldb.com/?submit.331880 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2037.pdf
CVE ID: CVE-2024-4715 State: PUBLISHED Published: 2024-05-10T12:00:06.077Z Last Updated: 2024-08-01T20:47:41.779Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/update_grade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263793 was assigned to this vulnerabil
The exploit has been disclosed to the public and may be used. The identifier VDB-263793 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263793 - https://vuldb.com/?ctiid.263793 - https://vuldb.com/?submit.331881 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2038.pdf
CVE ID: CVE-2024-4716 State: PUBLISHED Published: 2024-05-10T13:00:04.645Z Last Updated: 2024-08-01T20:47:41.778Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /model/update_exam.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263794 is the identifier assigned to this vulnerability.
e exploit has been disclosed to the public and may be used. VDB-263794 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263794 - https://vuldb.com/?ctiid.263794 - https://vuldb.com/?submit.331882 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2039.pdf
CVE ID: CVE-2024-4717 State: PUBLISHED Published: 2024-05-10T14:00:06.390Z Last Updated: 2024-08-01T20:47:41.753Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /model/update_classroom.php. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-26
The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263795. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263795 - https://vuldb.com/?ctiid.263795 - https://vuldb.com/?submit.331883 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2040.pdf
CVE ID: CVE-2024-4718 State: PUBLISHED Published: 2024-05-10T14:31:04.027Z Last Updated: 2024-08-01T20:47:41.664Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /model/delete_student_grade_subject.php. The manipulation of the argument index leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability i
he attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263796. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263796 - https://vuldb.com/?ctiid.263796 - https://vuldb.com/?submit.331884 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2041.pdf
CVE ID: CVE-2024-4719 State: PUBLISHED Published: 2024-05-10T15:00:04.908Z Last Updated: 2024-08-01T20:47:41.760Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /model/delete_record.php. The manipulation of the argument page leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263797 was assigned
launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263797 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263797 - https://vuldb.com/?ctiid.263797 - https://vuldb.com/?submit.331885 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2042.pdf
CVE ID: CVE-2024-4720 State: PUBLISHED Published: 2024-05-10T15:00:06.457Z Last Updated: 2024-08-01T20:47:41.708Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /model/approve_petty_cash.php. The manipulation of the argument admin_index leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263798 is the identifier assign
be launched remotely. The exploit has been disclosed to the public and may be used. VDB-263798 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263798 - https://vuldb.com/?ctiid.263798 - https://vuldb.com/?submit.331886 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2043.pdf
CVE ID: CVE-2024-4721 State: PUBLISHED Published: 2024-05-10T15:31:04.610Z Last Updated: 2024-08-01T20:47:41.769Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/add_student_subject.php. The manipulation of the argument index leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-2
. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263799. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263799 - https://vuldb.com/?ctiid.263799 - https://vuldb.com/?submit.331887 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2044.pdf
CVE ID: CVE-2024-4722 State: PUBLISHED Published: 2024-05-10T16:00:04.633Z Last Updated: 2024-08-01T20:47:41.669Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Complete Web-Based School Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument category leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263800. Additional Analyst Notes:
disclosed to the public and may be used. The identifier of this vulnerability is VDB-263800. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263800 - https://vuldb.com/?ctiid.263800 - https://vuldb.com/?submit.331888 - https://github.com/E1CHO/cve_hub/blob/main/Complete%20Web-Based%20School%20Management%20System%20-%20xss/Complete%20Web-Based%20School%20Management%20System%20-%20vuln%2045.pdf
CVE ID: CVE-2024-4723 State: PUBLISHED Published: 2024-05-10T16:31:03.825Z Last Updated: 2024-08-01T20:47:41.673Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in Campcodes Legal Case Management System 1.0. This issue affects some unknown processing of the file /admin/case-status. The manipulation of the argument case_status leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263801 was assigned to this vulnerability. Additional Ana
en disclosed to the public and may be used. The identifier VDB-263801 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263801 - https://vuldb.com/?ctiid.263801 - https://vuldb.com/?submit.331982 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_case-status.md
CVE ID: CVE-2024-4724 State: PUBLISHED Published: 2024-05-10T16:31:05.413Z Last Updated: 2024-08-01T20:47:41.644Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/case-type. The manipulation of the argument case_type_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-263802 is the identifier assigned to this vulnerability. Additional Analyst Not
losed to the public and may be used. VDB-263802 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263802 - https://vuldb.com/?ctiid.263802 - https://vuldb.com/?submit.331983 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_case-type.md
CVE ID: CVE-2024-4725 State: PUBLISHED Published: 2024-05-10T17:00:06.580Z Last Updated: 2024-08-01T20:47:41.658Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability has been found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/client_user. The manipulation of the argument f_name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263803. Additional
been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263803. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263803 - https://vuldb.com/?ctiid.263803 - https://vuldb.com/?submit.331988 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_client_user.md
CVE ID: CVE-2024-4726 State: PUBLISHED Published: 2024-05-10T17:31:04.429Z Last Updated: 2024-08-01T20:47:41.750Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Legal Case Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/clients. The manipulation of the argument f_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263804. Additional Analyst Notes: - CISA ADP
to the public and may be used. The identifier of this vulnerability is VDB-263804. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263804 - https://vuldb.com/?ctiid.263804 - https://vuldb.com/?submit.331989 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_clients.md
CVE ID: CVE-2024-4727 State: PUBLISHED Published: 2024-05-10T18:00:04.947Z Last Updated: 2024-08-01T20:47:41.784Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/court-type. The manipulation of the argument court_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263805 was assigned to this vulnerability. Additional Analyst Notes
ed to the public and may be used. The identifier VDB-263805 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263805 - https://vuldb.com/?ctiid.263805 - https://vuldb.com/?submit.331990 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_court-type.md
CVE ID: CVE-2024-4728 State: PUBLISHED Published: 2024-05-10T18:31:04.350Z Last Updated: 2024-08-21T20:48:26.777Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/court. The manipulation of the argument court_name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-263806 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE
the public and may be used. VDB-263806 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.263806 - https://vuldb.com/?ctiid.263806 - https://vuldb.com/?submit.331992 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_court.md
CVE ID: CVE-2024-4729 State: PUBLISHED Published: 2024-05-10T19:00:04.704Z Last Updated: 2024-08-01T20:47:41.755Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability was found in Campcodes Legal Case Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/expense-type. The manipulation of the argument name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263807. Additional Analyst Notes: -
the public and may be used. The associated identifier of this vulnerability is VDB-263807. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.263807 - https://vuldb.com/?ctiid.263807 - https://vuldb.com/?submit.331993 - https://github.com/yylmm/CVE/blob/main/Legal%20Case%20Management%20System/xss_admin_expense-type.md
CVE ID: CVE-2024-4730 State: PUBLISHED Published: 2024-05-10T19:00:06.379Z Last Updated: 2024-08-01T20:47:41.797Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Campcodes Products: Legal Case Management System Problem Types: CWE-79 Description: A vulnerability classified as problematic has been found in Campcodes Legal Case Management System 1.0. Affected is an unknown function of the file /admin/judge. The manipulation of the argument judge_name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-263808. Additional Analyst Notes: - CISA ADP Vulnrichm