ahrixia/CVE-2023-43325

ahrixia/CVE-2023-43325

GitHubGitHub
GitHubgithub.com
Releases0
mooSocial v3.1.8 is vulnerable to cross-site scripting on user login function.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-43325↗
6.1 MEDIUM—

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.