CVE-2023-3844
LowCVSS 3.5Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
A vulnerability was found in mooSocial mooDating 1.2 related to an unknown functionality of the file /friends in the URL Handler component. Manipulation of this functionality leads to cross-site scripting (XSS) attacks.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a risk of session hijacking or data theft.
Recommendation
It is recommended to update to the latest version of mooSocial mooDating to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in mooSocial mooDating 1.2
See all- CVE-2023-3848Low
A vulnerability has been identified in mooSocial mooDating version 1.2 that leads to cross site scripting (XSS) attacks through manipulation of the /users/view file in the URL Handler component. The attack can be initiated remotely.
- CVE-2023-3847Low
A vulnerability was found in mooSocial mooDating version 1.2 that allows cross site scripting (XSS) attacks through manipulation of code in the /users file of the URL Handler component. The attack can be initiated remotely.
- CVE-2023-3846Low
A vulnerability has been found in mooSocial mooDating version 1.2 that leads to cross site scripting (XSS) attacks. The issue affects an unknown part of the file /pages of the URL Handler component, allowing for remote exploitation.
Original NVD description (English source)
A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /friends of the component URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235195. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS