Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3250
HistoryJan 09, 2017 - 6:13 a.m.

Cross-site Scripting (XSS)

2017-01-0906:13:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.003 Low

EPSS

Percentile

65.7%

moin is vulnerable to cross-site scripting (XSS). The rsslink function in the theme/__init__.py does not properly escape the page name in a rss link, allowing remote attackers to inject arbitrary web script or HTML.

CPENameOperatorVersion
moinle1.9.4