CVE-2023-4173

CVE-2023-4173 affects mooSocial mooStore 3.1.6; a cross-site scripting flaw resides in the /search/index handler via the q parameter. The vulnerability can be triggered remotely, enabling execution of malicious scripts in a victim’s browser (XSS) and potentially session/token theft. Public proof-...

CVE-2023-4174

mooSocial mooStore 3.1.6 is affected by a reflected cross-site scripting vulnerability. The Nuclei template and exploit-db entry describe an XSS that can be triggered remotely via crafted input (e.g., /search/index?q=...). The issue impacts an unknown functionality; attacker-controlled input may ...