CVE-2023-44813 PoC — mooSocial 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml

Associated Vulnerability

Title:mooSocial 跨站脚本漏洞 (CVE-2023-44813)
Description:mooSocial是mooSocial公司的一个多平台、移动就绪、用户友好的脚本。用于构建社区驱动的内容共享和社交网络网站。 mooSocial v.3.1.8版本存在安全漏洞。攻击者利用该漏洞通过特制的有效载荷对邀请好友登录功能的mode参数执行任意代码。

Description

Cross-Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a crafted payload to the mode parameter of the invite friend login function.

File Snapshot


 id: CVE-2023-44813

info:
  name: mooSocial v.3.1.8 - Cross-Site Scripting
  author: ritikchaddha
  

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!