Skip to content
OpenAdvisories
Medium DSA-2321-1 1 CVE

moin - cross-site scripting

Published Oct 10, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 moin 1.7.1-3+lenny6
Debian · 6.0 moin 1.9.3-1+squeeze1

Vulnerabilities 1

  • Medium 6.1

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascri…