CVE-2024-3526

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Campcodes Online Event Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259897 was assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-352609.8An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.CVE-2024-352617.8Azure Network Watcher VM Extension Elevation of Privilege VulnerabilityCVE-2024-352635.7Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityCVE-2024-352648.1.NET and Visual Studio Remote Code Execution VulnerabilityCVE-2024-352657.0Windows Perception Service Elevation of Privilege VulnerabilityCVE-2024-352667.6Azure DevOps Server Spoofing VulnerabilityCVE-2024-352677.6Azure DevOps Server Spoofing VulnerabilityCVE-2024-352705.3Windows iSCSI Service Denial of Service VulnerabilityCVE-2024-352718.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-352728.8SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-352738.8A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escCVE-2024-352742.3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions
CVE-2024-3526: Medium severity, CVSS 5.4 | Vulnix