Low severity · published Mar 12, 2026
CVE-2026-3984
Campcodes Division Regional Athletic Meet Game Result Matrix System save_up_athlete.php cross site scripting
3.5
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This vulnerability affects unknown code of the file save_up_athlete.php. This manipulation of the argument a_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Division Regional Athletic Meet Game Result Matrix System · Campcodes
2.1 · source: vendor
Affected product
DR
Division Regional Athletic Meet Game Result Matrix System
Campcodes
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-3984
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-3984
github.com
https://github.com/LaneyYu/cve/issues/11
vuldb.com
https://vuldb.com/?ctiid.350420
vuldb.com
https://vuldb.com/?id.350420
vuldb.com
https://vuldb.com/?submit.769721
www.campcodes.com
https://www.campcodes.com/
More from Division Regional Athletic Meet Game Result Matrix System
3.5
CVE-2026-3983
Campcodes Division Regional Athletic Meet Game Result Matrix System save-games.php cross site scripting