Lucene search

K
cvelistMitreCVELIST:CVE-2023-43325
HistorySep 25, 2023 - 12:00 a.m.

CVE-2023-43325

2023-09-2500:00:00
mitre
www.cve.org
1
reflected cross-site scripting
data parameter
moosocial v3.1.8
session cookies
impersonation
crafted url

EPSS

0.304

Percentile

97.0%

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user’s session cookies and impersonate their account via a crafted URL.

EPSS

0.304

Percentile

97.0%

Related for CVELIST:CVE-2023-43325