CVE-2023-3847: mooSocial mooDating URL users cross site scripting

Security readout for executives and security teams

CVE-2023-3847 is a cross-site scripting issue in mooSocial mooDating 1.2 affecting the /users URL handler. A remote, authenticated attacker could manipulate input so script runs in another user's browser, potentially affecting account actions or displayed content. Sources do not identify a vendor patch or active exploitation. Exposure appears limited to organizations running mooSocial mooDating version 1.2, especially if the /users route is reachable by authenticated users. The source bundle does not list other affected versions, CPEs, vulnerable parameters, or deployment-specific prerequisites. Treat as a moderate-priority application security issue. It is not described as actively exploited and requires authentication, but public technical references exist. Prioritize affected public communities or platforms with untrusted users, then confirm vendor remediation options. Mitigation focus: Check mooSocial or mooDating vendor guidance for a fixed version or hotfix.; Inventory and prioritize any mooDating 1.2 deployments.; Restrict /users access where operationally acceptable until vendor guidance is confirmed..

Prepared

Jun 1, 2026, 14:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.