CVE-2023-45542 PoC — mooSocial 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml

Associated Vulnerability

Title:mooSocial 跨站脚本漏洞 (CVE-2023-45542)
Description:mooSocial是mooSocial公司的一个多平台、移动就绪、用户友好的脚本。用于构建社区驱动的内容共享和社交网络网站。 mooSocial 3.1.8版本存在安全漏洞，该漏洞源于存在跨站脚本（XSS）漏洞。攻击者可利用该漏洞通过Search功能的参数q获取敏感信息。

Description

A reflected cross-site scripting (XSS) vulnerability exisits in the q parameter on search function of mooSocial v3.1.8 which allows attackers to steal user's session cookies and impersonate their account via a crafted URL.

File Snapshot


 id: CVE-2023-45542

info:
  name: MooSocial 3.1.8 - Cross-Site Scripting
  author: r3Y3r53
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!