Is CVE-2024-2719 actively exploited?

No active exploitation of CVE-2024-2719 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-2719 be exploited remotely?

Yes. CVE-2024-2719 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-2719?

CVE-2024-2719 has a CVSS score of 6.1 (MEDIUM).

HOME VULNERABILITIESCVE-2024-2719

MEDIUM

CVE-2024-2719

CWE-79Published: March 20, 2024· Updated: Jun 17, 2026

6.1

CVSS v3.1

Official Description

A vulnerability classified as problematic has been found in Campcodes Complete Online DJ Booking System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-257472.

NVD Source

Technical Analysis

CVE-2024-2719 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

From a weakness classification perspective (CWE-79): Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionRequired

ScopeChanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Vendors & Products

campcodes1 product(s)

complete online dj booking system

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://vuldb.com/?id.257472

News & Research Mentioning CVE-2024-2719

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA Alerts· Apr 20, 2026

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability CVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability CVE-2025-2749 Kentico Xperience Path Traversal Vulnerability CVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability CVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability CVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability CVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20133 Cisco Catalyst SD-WAN Ma [xlite_meta score:63 src:CISA Alerts xlite_fp:0b55e79970c47e4ece69ce1dd3660bb43f47c536c063390ae3b0b0034a186fa0]