{"id":"CVE-2024-3531","aliases":["EUVD-2024-32117","GHSA-rm8w-vp6f-85hq"],"status":"published","title":"Campcodes Complete Online Student Management System courses_view.php cross site scripting","description":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.","severity":{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00644,"percentile":0.51232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-04-10T01:31:04Z","modified":"2026-06-17T07:44:27Z","products":[{"vendor":"campcodes","product":"complete online student management system"},{"vendor":"campcodes","product":"online_student_management_system"}],"references":[{"url":"https://vuldb.com/?id.259901","tags":["vdb-entry","technical-description","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?ctiid.259901","tags":["signature","permissions-required","x_transferred","Permissions Required","VDB Entry"]},{"url":"https://vuldb.com/?submit.312522","tags":["third-party-advisory","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://github.com/E1CHO/cve_hub/blob/main/Complete%20Online%20Student%20Management%20System/Complete%20Online%20Student%20Management%20System%20-%20vuln%204.pdf","tags":["exploit","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-3531"},{"url":"https://github.com/advisories/GHSA-rm8w-vp6f-85hq"}],"sources":{"cve":[{"id":"CVE-2024-3531","title":"Campcodes Complete Online Student Management System courses_view.php cross site scripting","description":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.","status":"published","published":"2024-04-10T01:31:04.932Z","modified":"2024-08-01T20:12:07.62Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"3.0","score":3.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:10.613319Z"}],"euvd":[{"id":"EUVD-2024-32117","description":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.","status":"published","published":"2024-04-10T01:31:04Z","modified":"2024-08-01T20:12:07Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T03:50:38.460826Z"}],"ghsa":[{"id":"GHSA-rm8w-vp6f-85hq","title":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been...","description":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.","status":"published","published":"2024-04-10T15:30:38Z","modified":"2024-04-10T15:30:46Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:57:05.342619Z"}],"nvd":[{"id":"CVE-2024-3531","description":"A vulnerability was found in Campcodes Complete Online Student Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file courses_view.php. The manipulation of the argument FirstRecord leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259901 was assigned to this vulnerability.","status":"published","published":"2024-04-10T02:15:10.653Z","modified":"2026-06-17T07:44:27.46Z","cvss":[{"version":"3.1","score":3.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:09:49.255123Z"}]}}