Skip to content
OpenAdvisories
Medium DLA-717-1 2 CVEs

moin - security update

Published Nov 22, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 moin 1.9.4-8+deb7u3

Vulnerabilities 2

  • Medium 6.1
    CVE-2016-7146

    MoinMoin Cross-site Scripting (XSS) vulnerability

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

    moin moin Ubuntu PyPI
  • Medium 6.1
    CVE-2016-9119

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moin moin Ubuntu PyPI