~ / search / GHSA-fc72-v54c-x9jg

GHSA-fc72-v54c-x9jg

MoinMoin Cross-site Scripting (XSS) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2010-0828

Packages

EcosystemPackageAffectedFixed in
PyPI moin >= 1.9.0, < 1.9.3 1.9.3
PyPI moin >= 1.8.0, < 1.8.8 1.8.8

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site scripting (XSS) vulnerability in `action/Despam.py` in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI.

References

External links from the advisory. They lead to third-party sites.