Lucene search
HistorySep 26, 2023 - 12:15 a.m.
CVE-2023-43325
cve-2023-43325
reflected cross-site scripting
data parameter
steal user's session cookies
impersonate account
crafted url
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.304
Percentile
97.0%
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user’s session cookies and impersonate their account via a crafted URL.
Affected configurations
Node
moosocialmoosocialMatch3.1.8
Related
cve
cve
CVE-2023-43325
2023-09-26 00:15:10
prion
prion
Cross site scripting
2023-09-26 00:15:00
vulnrichment
vulnrichment
CVE-2023-43325
2023-09-25 00:00:00
zdt
zdt
cvelist
cvelist
CVE-2023-43325
2023-09-25 00:00:00
nuclei
nuclei
MooSocial 3.1.8 - Cross-Site Scripting
2023-11-23 11:30:47
exploitdb
exploitdb
mooSocial 3.1.8 - Cross-Site Scripting (XSS) on User Login Page
2024-02-02 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.304
Percentile
97.0%
Related for NVD:CVE-2023-43325