Description
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | moin | < 1.5.7 | 1.5.7 | GHSA-m84w-vgwf-p893 |
References
- moinmoin-pageinfo-pagename-xss(32377) vdb-entry
- 22506 vdb-entry
- 31874 vdb-entry
- 31873 vdb-entry
- 24096 third-party-advisory
- 31871 vdb-entry
- ADV-2007-0553 vdb-entry
- 24117 third-party-advisory
- http://moinmoin.wikiwikiweb.de/MoinMoinRelease1.5/CHANGES
- 31872 vdb-entry
- USN-421-1 vendor-advisory