CVE-2024-3542

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in Campcodes Church Management System 1.0. This vulnerability affects unknown code of the file /admin/add_visitor.php. The manipulation of the argument mobile leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259912.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-354206.2wac commit 385e1 was discovered to contain a heap overflow.CVE-2024-354215.5vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser.c.CVE-2024-354227.8vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c.CVE-2024-354237.8vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_wasm_parser.c.CVE-2024-354245.5vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.c.CVE-2024-354255.5vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_function.c.CVE-2024-354269.8vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c.CVE-2024-354275.5vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.c.CVE-2024-354287.1ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the CVE-2024-354296.5ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.CVE-2024-35437.5Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by tCVE-2024-354308.1In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data fro
CVE-2024-3542: Medium severity, CVSS 6.1 | Vulnix