Vulnerability · Published Aug 6, 2023 · Assigned by VulDB
CVE-2023-4174mooSocial mooStore cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in mooStore from mooSocial. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 9.1% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)9.1%top 4.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling2Nuclei, Public PoC
Official description
A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability.
Affected products (as reported)
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- https://vuldb.com/?id.236209 vdb-entry, technical-description
- https://vuldb.com/?ctiid.236209 signature, permissions-required
- http://packetstormsecurity.com/files/174017/Social-Commerce-3.1.6-Cross-Site-Scripting.html related