Lucene search
+L

5 matches found

OSV
OSV
•added 2022/05/17 5:17 a.m.•13 views

GHSA-452H-RX28-49W9 MoinMoin Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

6.1CVSS5.6AI score0.02113EPSS
SaveExploits1References9
Veracode
Veracode
•added 2017/01/09 6:13 a.m.•31 views

Cross-site Scripting (XSS)

moin is vulnerable to cross-site scripting XSS. The rsslink function in the theme/init.py does not properly escape the page name in a rss link, allowing remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.6AI score0.02113EPSS
SaveExploits1References6Affected Software1
UbuntuCve
UbuntuCve
•added 2013/01/03 1:55 a.m.•88 views

CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6.1AI score0.02113EPSS
SaveExploits1References1
PyPA
PyPA
•added 2013/01/03 1:55 a.m.•15 views

PYSEC-2013-23

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6AI score0.02113EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/03 12:00 a.m.•4 views

CVE-2012-6082: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6AI score0.02113EPSS
SaveExploits1References2
Rows per page
Query Builder