mooSocial Social-Commerce 3.1.6 - Reflected XSS Vulnerability

Exploit Title: Social-Commerce 3.1.6 - Reflected XSS Exploit Author: CraCkEr Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link: https://social-commerce.moosocial.com/ Version: 3.1.6 Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE: CVE-2023-4174...

CVE-2023-4174

creationtimestamp| type| source ---|---|--- 2023-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51671 2023-08-11 08:50:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4898 2023-08-17 02:51:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4936...

Social-Commerce 3.1.6 - Reflected XSS

Exploit Title: Social-Commerce 3.1.6 - Reflected XSS Exploit Author: CraCkEr Date: 28/07/2023 Vendor: mooSocial Vendor Homepage: https://moosocial.com/ Software Link: https://social-commerce.moosocial.com/ Version: 3.1.6 Tested on: Windows 10 Pro Impact: Manipulate the content of the site CVE:...

CVE-2023-4174

mooSocial mooStore 3.1.6 is affected by a reflected cross-site scripting vulnerability. The Nuclei template and exploit-db entry describe an XSS that can be triggered remotely via crafted input (e.g., /search/index?q=...). The issue impacts an unknown functionality; attacker-controlled input may ...