CVE-2023-3848: mooSocial mooDating URL view cross site scripting

Published Jul 23, 2023

Updated

A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235199. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Credit

CraCkEr

Affected Software

1 affected component

mooSocial mooDating=1.2

Event History

Jul 23, 2023

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

DescriptionSeverityWeakness

Jul 28, 2023

Exploit Published

12:00 AM

Known Exploited

12:00 AM

Frequently Asked Questions

What is the severity of CVE-2023-3848?

The severity of CVE-2023-3848 is medium (6.1).

What component of mooSocial mooDating is affected by CVE-2023-3848?

The component URL Handler of mooSocial mooDating is affected by CVE-2023-3848.

What is the vulnerability type of CVE-2023-3848?

CVE-2023-3848 is a cross-site scripting (XSS) vulnerability.

Can the attack be initiated remotely for CVE-2023-3848?

Yes, the attack for CVE-2023-3848 can be initiated remotely.

Are there any public references for CVE-2023-3848?

Yes, there are public references available for CVE-2023-3848. You can find them at the following links: [link 1](https://www.exploit-db.com/exploits/51628), [link 2](http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html), [link 3](https://vuldb.com/?ctiid.235199).