CVE-2024-2720: Campcodes Complete Online DJ Booking System aboutus.php cross site scripting
First published: Wed Mar 20 2024(Updated: )
A vulnerability classified as problematic was found in Campcodes Complete Online DJ Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257473 was assigned to this vulnerability.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Online DJ Booking Management System | ||
| Online DJ Booking Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-2720?
CVE-2024-2720 is classified as problematic due to its potential for cross-site scripting attacks.
What causes CVE-2024-2720?
CVE-2024-2720 is caused by the manipulation of the 'pagetitle' argument in the '/admin/aboutus.php' file.
How do I fix CVE-2024-2720?
To fix CVE-2024-2720, validate and sanitize user input for the 'pagetitle' parameter before processing.
Which systems are affected by CVE-2024-2720?
CVE-2024-2720 affects version 1.0 of Campcodes Complete Online DJ Booking System.
Is CVE-2024-2720 exploitable remotely?
Yes, CVE-2024-2720 can be exploited remotely as it targets a web application functionality.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/severity
- agent/last-modified-date
- agent/event
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- vendor/campcodes
- canonical/online dj booking management system
- version/online dj booking management system/1.0