Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown
CVE-2023-45542
Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function.
0
Attacker Value
Unknown
CVE-2023-44813
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function.
0
Attacker Value
Unknown
CVE-2023-44812
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the admin_redirect_url parameter of the user login function.
0
Attacker Value
Unknown
CVE-2023-44811
Disclosure Date: October 09, 2023 (last updated February 25, 2025)
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the admin Password Change Function.
0
Attacker Value
Unknown
CVE-2023-43323
Disclosure Date: September 28, 2023 (last updated February 25, 2025)
mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].
0
Attacker Value
Unknown
CVE-2023-43325
Disclosure Date: September 26, 2023 (last updated February 25, 2025)
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
0
Attacker Value
Unknown
CVE-2023-43326
Disclosure Date: September 25, 2023 (last updated February 25, 2025)
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
0
