Skip to content
OpenAdvisories
Medium DSA-1791-1 1 CVE

moin - cross-site scripting

Published May 6, 2009 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 moin 1.7.1-3+lenny2

Vulnerabilities 1

  • Medium 6.1

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action in the error_msg function or (2) multiple vectors related …