CVE-2023-44811

2023-10-0900:00:00

mitre

www.cve.org

moosocial

csrf

vulnerability

remote attacker

code execution

admin

password change function

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

47.4%

JSON

Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the admin Password Change Function.

References

github.com/ahrixia/CVE-2023-44811