mooSocial records

19 published records for vendor mooSocial.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

19 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
35Monitor	CVE-2023-40868Proof of concept	Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the Dmoosocial · moosocial · CWE-352 pre-auth RCE CSRF	High8.8	1.3%Sep 14, 2023
35Monitor	CVE-2023-44811Proof of concept	Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitivemoosocial · moosocial · CWE-352 pre-auth RCE CSRF	High8.8	1.0%Oct 9, 2023
27Monitor	CVE-2023-4174Proof of concept	mooSocial mooStore cross site scriptingmoosocial · moostore · CWE-79 Pre-auth XSS	Medium6.1	9.1%Aug 5, 2023
27Monitor	CVE-2023-43323Proof of concept	mooSocial 3.1.8 is vulnerable to external service interaction on post function.moosocial · moosocial · CWE-15 Pre-auth	Medium6.5	2.0%Sep 28, 2023
26Monitor	CVE-2023-3847Proof of concept	mooSocial mooDating URL users cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3848Proof of concept	mooSocial mooDating URL view cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3849Proof of concept	mooSocial mooDating URL find-a-match cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3846Proof of concept	mooSocial mooDating URL pages cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3845Proof of concept	mooSocial mooDating URL ajax_invite cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3843Proof of concept	mooSocial mooDating URL question cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-3844Proof of concept	mooSocial mooDating URL friends cross site scriptingmoosocial · moodating · CWE-79 Pre-auth XSS	Medium6.1	5.9%Jul 23, 2023
26Monitor	CVE-2023-4173Proof of concept	mooSocial mooStore index cross site scriptingmoosocial · moostore · CWE-79 Pre-auth XSS	Medium6.1	5.4%Aug 5, 2023
25Monitor	CVE-2023-43325Proof of concept	A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'moosocial · moosocial · CWE-79 Pre-auth XSS	Medium6.1	2.0%Sep 25, 2023
25Monitor	CVE-2023-44812Proof of concept	Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 pre-auth RCE XSS	Medium6.1	2.0%Oct 9, 2023
25Monitor	CVE-2023-44813Proof of concept	Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to thmoosocial · moosocial · CWE-79 pre-auth RCE XSS	Medium6.1	1.8%Oct 9, 2023
25Monitor	CVE-2023-45542Proof of concept	Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the qmoosocial · moosocial · CWE-79 Pre-auth XSS	Medium6.1	1.8%Oct 16, 2023
25Monitor	CVE-2023-43326Proof of concept	A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session comoosocial · moosocial · CWE-79 Pre-auth XSS	Medium6.1	1.7%Sep 25, 2023
24Monitor	CVE-2023-40869Proof of concept	Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a moosocial · moosocial · CWE-79 pre-auth RCE XSS	Medium6.1	1.0%Sep 14, 2023
24Monitor	CVE-2023-4175No exploit	mooSocial mooTravel cross site scriptingmoosocial · mootravel · CWE-79 Pre-auth XSS	Medium6.1	0.3%Aug 5, 2023

CVE-2023-40868
35Monitor
Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the D
HighCVSS 8.8Proof of conceptEPSS 1%
- pre-auth RCE
- CSRF
moosocial · moosocialSep 14, 2023
CVE-2023-44811
35Monitor
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive
HighCVSS 8.8Proof of conceptEPSS 1%
- pre-auth RCE
- CSRF
moosocial · moosocialOct 9, 2023
CVE-2023-4174
27Monitor
mooSocial mooStore cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 9%
- Pre-auth
- XSS
moosocial · moostoreAug 5, 2023
CVE-2023-43323
27Monitor
mooSocial 3.1.8 is vulnerable to external service interaction on post function.
MediumCVSS 6.5Proof of conceptEPSS 2%
- Pre-auth
moosocial · moosocialSep 28, 2023
CVE-2023-3847
26Monitor
mooSocial mooDating URL users cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3848
26Monitor
mooSocial mooDating URL view cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3849
26Monitor
mooSocial mooDating URL find-a-match cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3846
26Monitor
mooSocial mooDating URL pages cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3845
26Monitor
mooSocial mooDating URL ajax_invite cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3843
26Monitor
mooSocial mooDating URL question cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-3844
26Monitor
mooSocial mooDating URL friends cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moodatingJul 23, 2023
CVE-2023-4173
26Monitor
mooSocial mooStore index cross site scripting
MediumCVSS 6.1Proof of conceptEPSS 5%
- Pre-auth
- XSS
moosocial · moostoreAug 5, 2023
CVE-2023-43325
25Monitor
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user'
MediumCVSS 6.1Proof of conceptEPSS 2%
- Pre-auth
- XSS
moosocial · moosocialSep 25, 2023
CVE-2023-44812
25Monitor
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
MediumCVSS 6.1Proof of conceptEPSS 2%
- pre-auth RCE
- XSS
moosocial · moosocialOct 9, 2023
CVE-2023-44813
25Monitor
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to th
MediumCVSS 6.1Proof of conceptEPSS 1%
- pre-auth RCE
- XSS
moosocial · moosocialOct 9, 2023
CVE-2023-45542
25Monitor
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
moosocial · moosocialOct 16, 2023
CVE-2023-43326
25Monitor
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session co
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
moosocial · moosocialSep 25, 2023
CVE-2023-40869
24Monitor
Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a
MediumCVSS 6.1Proof of conceptEPSS 1%
- pre-auth RCE
- XSS
moosocial · moosocialSep 14, 2023
CVE-2023-4175
24Monitor
mooSocial mooTravel cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
moosocial · mootravelAug 5, 2023