CVE-2023-3844: mooSocial mooDating URL friends cross site scripting

Published Jul 23, 2023

Updated

A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /friends of the component URL Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-235195. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Credit

CraCkEr

Affected Software

1 affected component

mooSocial mooDating=1.2

Event History

Jul 23, 2023

CVE Published

via MITRE·05:31 AM

Data Sourced

via MITRE·05:31 AM

DescriptionSeverityWeakness

Jul 28, 2023

Exploit Published

12:00 AM

Known Exploited

12:00 AM

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2023-3844.

What is the severity of CVE-2023-3844?

The severity of CVE-2023-3844 is medium.

What is the affected software version?

The affected software version is mooSocial mooDating 1.2.

What is the CWE number associated with this vulnerability?

The CWE number associated with this vulnerability is CWE-79.

How can the vulnerability be exploited?

The vulnerability can be exploited through remote cross-site scripting (XSS) attacks.