Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-43325
HistorySep 25, 2023 - 12:00 a.m.

CVE-2023-43325

2023-09-2500:00:00
mitre
github.com
cross-site scripting
moosocial
vulnerability
session cookies
crafted url

AI Score

5.6

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user’s session cookies and impersonate their account via a crafted URL.

AI Score

5.6

Confidence

High

SSVC

Exploitation

poc

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-43325