CVE-2024-3541

A vulnerability classified as problematic has been found in Campcodes Church Management System 1.0. This affects an unknown part of the file /admin/admin_user.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259911.

• CWE-79

• https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.259911Permissions Required, VDB Entry
• https://vuldb.com/?id.259911Permissions Required, VDB Entry
• https://vuldb.com/?submit.312542Third Party Advisory, VDB Entry
• https://github.com/E1CHO/cve_hub/blob/main/Church%20Management%20System/Church%20Management%20System%20-%20vuln%208.pdfExploit
• https://vuldb.com/?ctiid.259911Permissions Required, VDB Entry
• https://vuldb.com/?id.259911Permissions Required, VDB Entry
• https://vuldb.com/?submit.312542Third Party Advisory, VDB Entry

Published

Apr 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35399TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to con…8.8
• CVE-2024-3540A vulnerability was found in Campcodes Church Management Sys…8.8
• CVE-2024-35400TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to con…5.3
• CVE-2024-35401TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to con…5.9
• CVE-2024-35403TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to con…2.7
• CVE-2024-35409WeBid 1.1.2 is vulnerable to SQL Injection via admin/tax.php…9.8
• CVE-2024-35410wac commit 385e1 was discovered to contain a heap overflow v…6.2
• CVE-2024-35418wac commit 385e1 was discovered to contain a heap overflow v…6.2
• CVE-2024-35419wac commit 385e1 was discovered to contain a heap overflow v…5.5
• CVE-2024-3542A vulnerability classified as problematic was found in Campc…6.1
• CVE-2024-35420wac commit 385e1 was discovered to contain a heap overflow.6.2
• CVE-2024-35421vmir e8117 was discovered to contain a segmentation violatio…5.5