CVE-2007-0857
moinmoin moinmoin: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days. Fixed in moin 1.5.7.
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) the page info, or the page name in a (2) AttachFile, (3) RenamePage, or (4) LocalSiteMap action.
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced
Affected
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-m84w-vgwf-p893 | PyPI | moin | <1.5.7 | 1.5.7 |
| PYSEC-2026-678 | PyPI | moin | <1.5.7 | 1.5.7 |