mooSocial mooStore cross site scripting
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 3.5epss 8.9%
from disclosure to weapon2 days
Published on NVDAug 6
1st PoC+2d
exploitation probability
8.9%top 5% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected products
mooSocial · mooStorepublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/51671githubgithub.com/d0rb/CVE-2023-4174★ 0cve_referencepacketstormsecurity.com/files/174017/Social-Commerce-3.1.6-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.