CVE-2024-25327: Justice Systems FullCourt Enterprise v · Cross Site Scripting (XSS)
Source CVE Database V5
Not known to be exploited · CVSS 6.1 Medium.
Data as of 26 Oct 2026, 09:08 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 46% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitation evidence
Disclosed: evidence found.
CVE published 7 Mar 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Given the lack of an official patch, organizations should implement several specific mitigations: 1) Employ Web Application Firewalls (WAFs) with custom rules to detect and block malicious payloads targeting the formatCaseNumber parameter. 2) Conduct input validation and output encoding on all user-supplied data, especially parameters used in search functions, to prevent script injection. 3) Educate users, particularly court staff, about the risks of clicking on suspicious links or inputs that could trigger XSS attacks. 4) Monitor logs and network traffic for unusual activity related to the Citation search function. 5) If possible, restrict access to the vulnerable functionality to trusted networks or users until a patch is available. 6) Engage with the vendor or software provider to obtain updates or workarounds. 7) Implement Content Security Policy (CSP) headers to limit the execution of unauthorized scripts in browsers. These targeted actions go beyond generic advice and focus on the specific vulnerable parameter and context.
Description
Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function.