CVE-2023-3845

CVE-2023-3845 affects mooSocial mooDating 1.2. The vulnerability is a Cross-Site Scripting (XSS) in the file /friends/ajax_invite of the URL Handler. It can be exploited remotely via URL parameters to inject JavaScript (e.g., stealing session cookies or accessing user data). Affected component: /...

CVE-2023-3847

MooSocial mooDating 1.2 is affected by a Cross-Site Scripting vulnerability in the URL Handler’s /users path. The root cause is improper handling/sanitization of URL parameters, enabling remote XSS and potential theft of session cookies if exploited. Connected docs indicate exploitation contexts ...

CVE-2023-3843

mooDating 1.2 contains a cross-site scripting vulnerability in the URL Handler’s /matchmakings/question parameter. The issue allows an attacker to manipulate URL parameters to inject script, with remote exploit possible and potential exposure of user session data as described in the linked NVD/Nu...

CVE-2023-3848

The CVE-2023-3848 issue affects mooSocial mooDating v1.2, specifically the URL Handler’s /users/view processing. The vulnerability is a cross-site scripting (XSS) flaw triggered via URL parameters, potentially exploitable remotely. Root cause: improper handling/ sanitization of data in the /users...

CVE-2023-3849

mooDating 1.2 contains a Cross-Site Scripting vulnerability in the URL Handler’s /find-a-match function. The flaw, triggered via URL parameters, allows remote injection of scripts (per nuclei/Exploit-DB entries) and can lead to user session token theft or access to personal data. Public PoC/explo...

CVE-2023-3846

CVE-2023-3846 affects mooSocial mooDating 1.2 and involves a cross-site scripting (XSS) flaw in the /pages URL Handler. Multiple connected sources confirm that an attacker can remotely induce XSS by manipulating URL parameters in the Pages component, potentially allowing theft of session cookies ...

CVE-2023-3844

mooSocial mooDating 1.2 contains a cross-site scripting flaw in the /friends URL Handler. An attacker can remotely craft a URL to inject malicious JavaScript, potentially stealing session cookies and accessing user data. The issue is confirmed across multiple sources (NVD entry, Nuclei template, ...