CVE-2023-3847: mooSocial mooDating URL users cross site scripting

Published Jul 23, 2023

Updated

A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-235198 is the identifier assigned to this vulnerability. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Credit

CraCkEr

Affected Software

1 affected component

mooSocial mooDating=1.2

Event History

Jul 23, 2023

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Jul 28, 2023

Exploit Published

12:00 AM

Known Exploited

12:00 AM

Frequently Asked Questions

What is the severity of CVE-2023-3847?

The severity of CVE-2023-3847 is medium with a CVSS score of 6.1.

How does CVE-2023-3847 affect the mooSocial mooDating component?

CVE-2023-3847 affects the URL Handler component of mooSocial mooDating 1.2 and can lead to cross-site scripting.

Can the attack exploiting CVE-2023-3847 be initiated remotely?

Yes, the attack exploiting CVE-2023-3847 can be initiated remotely.

What is the identifier assigned to CVE-2023-3847?

The identifier assigned to CVE-2023-3847 is VDB-235198.

How can I fix CVE-2023-3847 in mooSocial mooDating 1.2?

To fix CVE-2023-3847, it is recommended to update to a patched version or apply the necessary security patches provided by the vendor.