Skip to content
OpenAdvisories
Medium DSA-3715-1 3 CVEs

moin - security update

Published Nov 15, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 moin 1.9.8-1+deb8u1

Vulnerabilities 3

  • Medium 6.1
    CVE-2016-7146

    MoinMoin Cross-site Scripting (XSS) vulnerability

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

    moin moin Ubuntu PyPI
  • Medium 6.1
    CVE-2016-7148

    MoinMoin Cross-site Scripting (XSS) vulnerability

    MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.

    moin moin Ubuntu PyPI
  • Medium 6.1
    CVE-2016-9119

    MoinMoin Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    moin moin Ubuntu PyPI