CVE-2023-40869: XSS
Published Sep 14, 2023
·Updated
Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a crafted script to the editmenu, copuon, and groupcategorias functions.
Affected Software
2 affected components
mooSocial MooSocial=3.1.6
mooSocial MooSocial=3.1.7
Event History
Sep 14, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-40869?
The severity of CVE-2023-40869 is medium with a CVSS score of 6.1.
2
How does CVE-2023-40869 affect mooSocial Software?
CVE-2023-40869 affects mooSocial Software versions 3.1.6 and 3.1.7.
3
What is the CWE ID of CVE-2023-40869?
The CWE ID of CVE-2023-40869 is 79.
4
How can a remote attacker exploit CVE-2023-40869?
A remote attacker can exploit CVE-2023-40869 by executing arbitrary code through crafted scripts in the edit_menu, copuon, and group_categorias functions.
5
Are there any references available for CVE-2023-40869?
Yes, you can find more information about CVE-2023-40869 at the following link: https://github.com/MinoTauro2020/CVE-2023-40869