CVE-2023-3845

🗓️ 23 Jul 2023 06:00:04Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 69 Views🌐 WEB

Vulnerability in mooSocial mooDating 1.2 /friends/ajax_invite file, leading to remote cross site scripting.

Reporter	Title	Published	Views	Family All 12
0day.today	mooDating 1.2 - Reflected Cross-site scripting Vulnerability	28 Jul 202300:00	–	zdt
CNNVD	mooSocial mooDating 跨站脚本漏洞	23 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-3845 mooSocial mooDating URL ajax_invite cross site scripting	23 Jul 202306:00	–	cvelist
Exploit DB	mooDating 1.2 - Reflected Cross-site scripting (XSS)	28 Jul 202300:00	–	exploitdb
EUVD	EUVD-2023-44473	3 Oct 202520:07	–	euvd
Nuclei	MooDating 1.2 - Cross-Site Scripting	1 Jul 202603:36	–	nuclei
NVD	CVE-2023-3845	23 Jul 202306:15	–	nvd
OSV	CVE-2023-3845	23 Jul 202306:15	–	osv
Packet Storm	mooDating 1.2 Cross Site Scripting	24 Jul 202300:00	–	packetstorm
Prion	Cross site scripting	23 Jul 202306:15	–	prion

NVD

Vulners

Node

moosocial moodatingMatch1.2

[
  {
    "vendor": "mooSocial",
    "product": "mooDating",
    "versions": [
      {
        "version": "1.2",
        "status": "affected"
      }
    ],
    "modules": [
      "URL Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
packetstormsecurity	www.packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.html

Parameter	Position	Path	Description	CWE
number	query param	matchmakings/question	Reflected XSS via user-supplied input in the question parameter	CWE-79
mode	query param	friends	Reflected XSS via mode parameter in friends endpoint	CWE-79
mode	query param	friends/ajax_invite	Reflected XSS via mode parameter in ajax_invite	CWE-79
access_token	query param	pages	Reflected XSS via access_token/redirect_url parameters on pages endpoint	CWE-79
redirect_url	query param	pages	Reflected XSS via access_token/redirect_url parameters on pages endpoint	CWE-79
tab	query param	users	Reflected XSS via tab parameter in users endpoint	CWE-79
tab	query param	users/view	Reflected XSS via tab parameter in users/view endpoint	CWE-79
session_popularity	query param	find-a-match	Reflected XSS via multiple query parameters on find-a-match	CWE-79
interest	query param	find-a-match	Reflected XSS via multiple query parameters on find-a-match	CWE-79
show_search_form	query param	find-a-match	Reflected XSS via multiple query parameters on find-a-match	CWE-79

17 Jun 2026 06:14Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.13.5 - 6.1

CVSS 24

CVSS 33.5

EPSS0.03648

CWE-79