PYSEC-2010-28

Cross-site scripting XSS vulnerability in action/Despam.py in the Despam action module in MoinMoin 1.8.7 and 1.9.2 allows remote authenticated users to inject arbitrary web script or HTML by creating a page with a crafted URI...

PYSEC-2008-13

Multiple cross-site scripting XSS vulnerabilities in macro/AdvancedSearch.py in moin and MoinMoin 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2004-1788

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.2.1 and earlier Description The issue allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges. Recommendations For MoinMoin versions 1.2.1 and earlier...