CVE-2023-3846 is a cross-site scripting (XSS) vulnerability found in mooSocial mooDating version 1.2, specifically within the URL Handler component when processing the /pages file. This vulnerability allows for remote attacks and could lead to unauthorized script execution in a user's browser. Rated with a CVSS score of 6.1 (Medium), the attack requires user interaction (UI:R) but has low attack complexity (AC:L) and no authentication is needed (PR:N). The potential impact includes low confidentiality and integrity compromise (C:L/I:L). While not actively exploited in the wild (KEV: No), exploit code is publicly available through ExploitDB (EDB-51628) and Nuclei templates, indicating a readily exploitable flaw. Despite this, there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.2CPE matchmatch criteria | cpe:2.3:a:moosocial:moodating:1.2:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.