CVE-2024-3525

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown function of the file /views/index.php. The manipulation of the argument msg leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259896.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-352507.8Windows Kernel-Mode Driver Elevation of Privilege VulnerabilityCVE-2024-352527.5Azure Storage Movement Client Library Denial of Service VulnerabilityCVE-2024-352534.4Microsoft Azure File Sync Elevation of Privilege VulnerabilityCVE-2024-352547.1Azure Monitor Agent Elevation of Privilege VulnerabilityCVE-2024-352555.5Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege VulnerabilityCVE-2024-352568.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35265.4A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerabilityCVE-2024-352609.8An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.CVE-2024-352617.8Azure Network Watcher VM Extension Elevation of Privilege VulnerabilityCVE-2024-352635.7Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2024-352648.1.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2024-352657.0Windows Perception Service Elevation of Privilege Vulnerability
CVE-2024-3525: Medium severity, CVSS 5.4 | Vulnix