CVE-2023-43323

mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShareVideo] and data[userShareLink].

• CWE-15

• https://github.com/ahrixia/CVE-2023-43323Exploit, Third Party Advisory
• https://github.com/ahrixia/CVE-2023-43323Exploit, Third Party Advisory

Published

Sep 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-43318TP-Link JetStream Smart Switch TL-SG2210P 5.0 Build 20211201…8.8
• CVE-2023-43319Cross Site Scripting (XSS) vulnerability in the Sign-In page…6.1
• CVE-2023-4332Broadcom RAID Controller web interface is vulnerable due to …7.5
• CVE-2023-43320An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 t…8.8
• CVE-2023-43321File Upload vulnerability in Digital China Networks DCFW-180…8.8
• CVE-2023-43322ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5…8.8
• CVE-2023-43325A reflected cross-site scripting (XSS) vulnerability in the …6.1
• CVE-2023-43326A reflected cross-site scripting (XSS) vulnerability exisits…6.1
• CVE-2023-4333Broadcom RAID Controller web interface doesn’t enforce SSL c…5.5
• CVE-2023-43331A cross-site scripting (XSS) vulnerability in the Add User f…5.4
• CVE-2023-43336Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15…8.8
• CVE-2023-43338Cesanta mjs v2.20.0 was discovered to contain a function poi…9.8