CVE-2023-3845

A vulnerability was found in mooSocial mooDating 1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /friends/ajax_invite of the component URL Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-235196. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

• CWE-79

• http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235196Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235196Third Party Advisory
• http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235196Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235196Third Party Advisory

Published

Jul 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38444In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38445In vowifiservice, there is a possible missing permission che…5.5
• CVE-2023-38446In vowifiservice, there is a possible missing permission che…5.5
• CVE-2023-38447In vowifiservice, there is a possible missing permission che…5.5
• CVE-2023-38448In vowifiservice, there is a possible missing permission che…5.5
• CVE-2023-38449In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38450In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38451In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38452In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38453In vowifiservice, there is a possible missing permission che…7.8
• CVE-2023-38454In vowifi service, there is a possible missing permission ch…5.5
• CVE-2023-38455In vowifiservice, there is a possible missing permission che…7.8