0.003 Low
EPSS
Percentile
65.7%
moin is vulnerable to cross-site scripting (XSS). The rsslink function in the theme/__init__.py does not properly escape the page name in a rss link, allowing remote attackers to inject arbitrary web script or HTML.
rsslink
theme/__init__.py
hg.moinmo.in/moin/1.9/rev/c98ec456e493
moinmo.in/SecurityFixes
secunia.com/advisories/51663
www.openwall.com/lists/oss-security/2012/12/29/7
www.openwall.com/lists/oss-security/2012/12/30/5
www.securityfocus.com/bid/57089