CVE-2023-3849: mooSocial mooDating URL find-a-match cross site scripting

Published Jul 23, 2023

Updated

A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the component URL Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-235200. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

Credit

CraCkEr

Affected Software

1 affected component

mooSocial mooDating=1.2

Event History

Jul 23, 2023

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionSeverityWeakness

Jul 28, 2023

Exploit Published

12:00 AM

Known Exploited

12:00 AM

Frequently Asked Questions

What is the severity of CVE-2023-3849?

The severity of CVE-2023-3849 is medium with a CVSS score of 6.1.

What is the affected software of CVE-2023-3849?

The affected software of CVE-2023-3849 is mooSocial mooDating 1.2.

What is the vulnerability type of CVE-2023-3849?

The vulnerability type of CVE-2023-3849 is cross-site scripting (XSS).

Can the vulnerability in CVE-2023-3849 be exploited remotely?

Yes, the vulnerability in CVE-2023-3849 can be exploited remotely.

How can the vulnerability in CVE-2023-3849 be fixed?

To fix the vulnerability in CVE-2023-3849, it is recommended to apply the latest patch or update provided by the vendor.