cve/2023/CVE-2023-43325.md

CVE-2023-43325

Description

A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.

POC

Reference

• https://github.com/ahrixia/CVE-2023-43325
• https://github.com/ahrixia/CVE-2023-43325

Github

• https://github.com/ahrixia/CVE-2023-43325
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/nomi-sec/PoC-in-GitHub