CVE-2023-3845

Summary

CVE-2023-3845 is a newly discovered cross-site scripting vulnerability affecting the mooDating component of mooSocial version 1.2. The issue lies within the URL Handler's /friends/ajax_invite file, which is considered problematic. An attacker can exploit this vulnerability remotely by manipulating input, leading to the execution of malicious scripts in a user's browser. Despite attempts to notify the vendor, their official contact email has been unresponsive.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.