CVE-2023-4174

A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability.

• CWE-79
• CWE-79

• http://packetstormsecurity.com/files/174017/Social-Commerce-3.1.6-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236209Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.236209Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/174017/Social-Commerce-3.1.6-Cross-Site-Scripting.htmlExploit, Third Party Advisory
• https://vuldb.com/?ctiid.236209Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.236209Third Party Advisory, VDB Entry

Published

Aug 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41734Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-41735Exposure of Sensitive Information to an Unauthorized Actor v…7.5
• CVE-2023-41736Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-41737Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
• CVE-2023-41738Improper neutralization of special elements used in an OS co…8.8
• CVE-2023-41739Uncontrolled resource consumption vulnerability in File Func…6.5
• CVE-2023-41740Improper limitation of a pathname to a restricted directory …5.3
• CVE-2023-41741Exposure of sensitive information to an unauthorized actor v…7.5
• CVE-2023-41742Excessive attack surface due to binding to an unrestricted I…7.5
• CVE-2023-41743Local privilege escalation due to insecure driver communicat…7.8
• CVE-2023-41744Local privilege escalation due to unrestricted loading of un…7.8
• CVE-2023-41745Sensitive information disclosure due to excessive collection…5.5