CVE-2024-2715: Campcodes Complete Online DJ Booking System user-search.php cross site scripting
First published: Wed Mar 20 2024(Updated: )
A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257468.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online DJ Booking Management System | ||
| Online DJ Booking Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2715?
CVE-2024-2715 is classified as a problematic vulnerability impacting the security of the Campcodes Complete Online DJ Booking System.
How does CVE-2024-2715 affect the Complete Online DJ Booking System?
CVE-2024-2715 affects the functionality of the /admin/user-search.php file, allowing for cross-site scripting due to manipulation of the searchdata argument.
What type of vulnerability is CVE-2024-2715?
CVE-2024-2715 is identified as a cross-site scripting (XSS) vulnerability.
How do I fix CVE-2024-2715?
To fix CVE-2024-2715, ensure that user input in the searchdata parameter is properly sanitized and validated to prevent XSS attacks.
What systems are affected by CVE-2024-2715?
CVE-2024-2715 affects version 1.0 of the Campcodes Complete Online DJ Booking System.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/campcodes
- canonical/online dj booking management system
- version/online dj booking management system/1.0