CVE-2023-3843: mooSocial mooDating URL question cross site scripting

Published Jul 23, 2023

Updated

A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-235194 is the identifier assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Credit

CraCkEr

Affected Software

1 affected component

mooSocial mooDating=1.2

Event History

Jul 23, 2023

CVE Published

via MITRE·04:31 AM

Data Sourced

via MITRE·04:31 AM

DescriptionSeverityWeakness

Jul 28, 2023

Exploit Published

12:00 AM

Known Exploited

12:00 AM

Frequently Asked Questions

What is the severity of CVE-2023-3843?

The severity of CVE-2023-3843 is medium (6.1).

What is the affected software version of CVE-2023-3843?

The affected software version of CVE-2023-3843 is mooDating 1.2.

What is the CWE category of CVE-2023-3843?

The CWE category of CVE-2023-3843 is CWE-79 (Cross-site Scripting).

How can I exploit CVE-2023-3843?

To exploit CVE-2023-3843, an attacker can launch a remote cross-site scripting attack by manipulating the unknown function in the /matchmakings/question URL Handler component.

Is there a fix available for CVE-2023-3843?

There is currently no known fix available for CVE-2023-3843. It is recommended to follow the provided references for any updates on patches or mitigations.