GitHub Advisoryadvisory · PyPI

GHSA-m84w-vgwf-p893 MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

MEDIUM Published 2022-05-01 Modified 2024-05-14 Official page ↗
Aliases
CVE-2007-0857
Ecosystem
PyPI
Packages
moin
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2024-05-14

Affected packages

• PyPI moin: < 1.5.7 → fixed in 1.5.7

Description

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.

Related

Alias · CVE (1)

  • CVE-2007-0857 Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References