CVE-2023-3846
LowCVSS 3.5Exploitation Probability (EPSS)
High risk88th percentile — higher than 88% of all known CVEs
Summary
A vulnerability has been found in mooSocial mooDating version 1.2 that leads to cross site scripting (XSS) attacks. The issue affects an unknown part of the file /pages of the URL Handler component, allowing for remote exploitation.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking. Organizations should be aware of the security risks associated with the application.
Recommendation
It is recommended to update mooSocial mooDating to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application to identify other potential threats is advisable.
Original NVD description (English source)
A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235197 was assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.