Skip to content
OpenAdvisories
Medium DSA-2024-1 1 CVE

moin - cross-site scripting

Published Mar 31, 2010 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 moin 1.7.1-3+lenny4

Vulnerabilities 1

  • Medium 5.4

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.