CVE-2023-4174

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-236209 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-417405.3Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRCVE-2023-417417.5Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346CVE-2023-417427.5Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, WinCVE-2023-417437.8Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber ProtectCVE-2023-417447.8Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) befCVE-2023-417455.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (LinuCVE-2023-417469.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before buildCVE-2023-417476.5Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows)CVE-2023-417489.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before buildCVE-2023-417497.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (WindCVE-2023-41756.1A vulnerability was found in mooSocial mooTravel 3.1.8 and classified as problematic. Affected by this issue is some unknown functionality. CVE-2023-417505.5Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) be
CVE-2023-4174: Medium severity, CVSS 6.1 | Vulnix