CVE-2024-2718

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/booking-bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257471.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Campcodes	Complete Online DJ Booking System	1.0
campcodes	complete_online_dj_booking_system	1.0

References

https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdfExploit
https://vuldb.com/?ctiid.257471Permissions Required, VDB Entry
https://vuldb.com/?id.257471Third Party Advisory, VDB Entry
https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20DJ%20Booking%20System/Complete%20Online%20DJ%20Booking%20System%20-%20vuln%207.pdfExploit
https://vuldb.com/?ctiid.257471Permissions Required, VDB Entry
https://vuldb.com/?id.257471Third Party Advisory, VDB Entry

Timeline

Published: Mar 20, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-271806.7An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL.CVE-2024-271818.8In Apache Linkis <= 1.5.0, Privilege Escalation in Basic management services where the attacking user is a trusted account allows acces CVE-2024-271824.9In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator account could delete any CVE-2024-271836.1XSS vulnerability in DJ-HelpfulArticles component for Joomla.CVE-2024-271846.1Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not..CVE-2024-271859.1The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors.CVE-2024-271866.1The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions.CVE-2024-271877.5Improper Access Controls allows backend users to overwrite their username when disallowed.CVE-2024-271885.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cloudways Breeze breeze.This issue aff CVE-2024-271895.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows St CVE-2024-27196.1A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function CVE-2024-271908.8Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a through 1.4.2.