Show filters
519 Total Results
Displaying 221-230 of 519
Sort by:
Attacker Value
Unknown
CVE-2023-44812
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the admin_redirect_url parameter of the user login function.
0
Attacker Value
Unknown
CVE-2023-44811
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the admin Password Change Function.
0
Attacker Value
Unknown
CVE-2023-25033
Disclosure Date: October 06, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions.
0
Attacker Value
Unknown
CVE-2023-44024
Disclosure Date: October 05, 2023 (last updated February 25, 2025)
SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remote attacker to execute arbitrary code via a crafted request to the updateCheckoutBehaviour function in the supercheckout.php component.
0
Attacker Value
Unknown
CVE-2023-25989
Disclosure Date: October 03, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
0
Attacker Value
Unknown
CVE-2023-44263
Disclosure Date: October 02, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Riyaz Social Metrics plugin <= 2.2 versions.
0
Attacker Value
Unknown
CVE-2023-44239
Disclosure Date: October 02, 2023 (last updated February 25, 2025)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jobin Jose WWM Social Share On Image Hover plugin <= 2.2 versions.
0
Attacker Value
Unknown
CVE-2023-43323
Disclosure Date: September 28, 2023 (last updated February 25, 2025)
mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].
0
Attacker Value
Unknown
CVE-2023-41238
Disclosure Date: September 27, 2023 (last updated February 25, 2025)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.3 versions.
0
Attacker Value
Unknown
CVE-2023-43325
Disclosure Date: September 26, 2023 (last updated February 25, 2025)
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
0
