CVE-2023-4173: low-severity vulnerability in mooSocial mooStore
mooSocial mooStore index cross site scripting
Published · Updated
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 3.5epss 5.4%
from disclosure to weapon2 days
Published on NVDAug 6
1st PoC+2d
exploitation probability
5.4%top 7% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A vulnerability, which was classified as problematic, was found in mooSocial mooStore 3.1.6. Affected is an unknown function of the file /search/index. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-236208.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
mooSocial · mooStorepublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/51670cve_referencepacketstormsecurity.com/files/174016/mooSocial-3.1.8-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — mooSocial mooStore
In the same product, most dangerous first.