CVE-2023-3848

A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-235199. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

• CWE-79

• http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235199Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235199Third Party Advisory
• http://packetstormsecurity.com/files/173691/mooDating-1.2-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://vuldb.com/?ctiid.235199Permissions Required, Third Party Advisory
• https://vuldb.com/?id.235199Third Party Advisory

Published

Jul 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38474Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2023-38475Missing Authorization vulnerability in RedNao Donations Made…8.8
• CVE-2023-38476Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-38477Missing Authorization vulnerability in Stanislav Kuznetsov Q…4.3
• CVE-2023-38478URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2023-38479Missing Authorization vulnerability in Codents Simple Google…5.3
• CVE-2023-38480Missing Authorization vulnerability in Certain Dev Booster E…5.3
• CVE-2023-38481URL Redirection to Untrusted Site ('Open Redirect') vulnerab…6.1
• CVE-2023-38482Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-38483Missing Authorization vulnerability in Dylan Blokhuis Instan…5.4
• CVE-2023-38484Vulnerabilities exist in the BIOS implementation of Aruba 92…6.4
• CVE-2023-38485Vulnerabilities exist in the BIOS implementation of Aruba 92…6.4