Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2022/05/17 5:17 a.m.•14 views

GHSA-452H-RX28-49W9 MoinMoin Cross-site scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

6.1CVSS5.6AI score0.02113EPSS
SaveExploits1References9
Veracode
Veracode
•added 2017/01/09 6:13 a.m.•33 views

Cross-site Scripting (XSS)

moin is vulnerable to cross-site scripting XSS. The rsslink function in the theme/init.py does not properly escape the page name in a rss link, allowing remote attackers to inject arbitrary web script or HTML...

4.3CVSS5.6AI score0.02113EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2013/01/03 1:55 a.m.•18 views

PYSEC-2013-23

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6AI score0.02113EPSS
SaveExploits1References7Affected Software1
UbuntuCve
UbuntuCve
•added 2013/01/03 1:55 a.m.•89 views

CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6.1AI score0.02113EPSS
SaveExploits1References1
Mend
Mend
•added 2013/01/03 1:00 a.m.•4 views

CVE-2012-6082

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

6.3CVSS0.02113EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2013/01/03 12:00 a.m.•3 views

PT-2013-1878

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.9.5 through 1.9.5 MoinMoin versions prior to 1.9.6 Description The issue is related to a cross-site scripting XSS vulnerability in the rsslink function, located in theme/ init .py. This vulnerability allows remote attackers...

5.1CVSS0.02113EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/03 12:00 a.m.•8 views

CVE-2012-6082: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the rsslink function in theme/init.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link...

4.3CVSS6AI score0.02113EPSS
SaveExploits1References2
Rows per page
Query Builder