7 matches found
GHSA-452H-RX28-49W9 MoinMoin Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...
Cross-site Scripting (XSS)
moin is vulnerable to cross-site scripting XSS. The rsslink function in the theme/init.py does not properly escape the page name in a rss link, allowing remote attackers to inject arbitrary web script or HTML...
PYSEC-2013-23
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...
CVE-2012-6082
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...
CVE-2012-6082
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...
PT-2013-1878
Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.9.5 through 1.9.5 MoinMoin versions prior to 1.9.6 Description The issue is related to a cross-site scripting XSS vulnerability in the rsslink function, located in theme/ init .py. This vulnerability allows remote attackers...
CVE-2012-6082: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...