mooSocial 3.1.8
Approved changes feed: RSS · Atom
cpe:2.3:a:moosocial:moosocial:3.1.8:*:*:*:*:*:*:*
part: a version: 3.1.8 update: *
| Vendor | Moosocial (b8cd32d7-de9a-5375-a56e-32fea075a6f0) |
|---|---|
| Product | Moosocial (110f6cf3-b1ee-5785-b9a2-1f82d5021c2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45542 |
vulnerable | 2026-06-08 06:12:42.644595 |
Details available
Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the Search function.
Published: 2023-10-16T00:00:00.000Z
Updated: 2024-09-16T18:29:50.610Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44813 |
vulnerable | 2026-06-08 06:12:41.503336 |
Details available
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function.
Published: 2023-10-09T00:00:00.000Z
Updated: 2024-09-19T15:44:21.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44812 |
vulnerable | 2026-06-08 06:12:41.503010 |
Details available
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the admin_redirect_url parameter of the user login function.
Published: 2023-10-09T00:00:00.000Z
Updated: 2024-09-19T15:45:27.816Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44811 |
vulnerable | 2026-06-08 06:12:41.502522 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the admin Password Change Function.
Published: 2023-10-09T00:00:00.000Z
Updated: 2024-09-19T15:35:50.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43326 |
vulnerable | 2026-06-08 06:11:11.137022 |
Details available
A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
Published: 2023-09-25T00:00:00.000Z
Updated: 2024-09-24T15:59:07.388Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43325 |
vulnerable | 2026-06-08 06:11:11.136537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43323 |
vulnerable | 2026-06-08 06:11:11.136024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.