CVE-2023-44812 PoC — mooSocial 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml

Associated Vulnerability

Title:mooSocial 跨站脚本漏洞 (CVE-2023-44812)
Description:mooSocial是mooSocial公司的一个多平台、移动就绪、用户友好的脚本。用于构建社区驱动的内容共享和社交网络网站。 mooSocial v.3.1.8版本存在安全漏洞。攻击者利用该漏洞通过特制的有效载荷对user login函数的admin_redirect_url参数执行任意代码。

Description

A cross-site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code by sending a crafted payload to the admin_redirect_url parameter of the user login function.

File Snapshot


 id: CVE-2023-44812

info:
  name: mooSocial v.3.1.8 - Cross-Site Scripting
  author: ritikchaddha
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!