2023-09-25 00:00:00
mitre
PUBLISHED
A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal users session cookies and impersonate their account via a crafted URL.