Lucene search

MitreVULNRICHMENT:CVE-2023-45542

HistoryOct 16, 2023 - 12:00 a.m.

CVE-2023-45542

2023-10-1600:00:00

mitre

github.com

cross site scripting

moosocial

remote attacker

sensitive information

crafted script

search function

AI Score

5.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function.

References

github.com/ahrixia/CVE-2023-45542