CVE-2008-3381
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- EPSS
- 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmoin:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-q7q4-5g8p-33fq | PyPI | moin | <1.6.4 | 1.6.4 |
| GHSA-q7q4-5g8p-33fq | PyPI | moin | >=1.7.0 <1.7.1 | 1.7.1 |
| PYSEC-2008-13 | PyPI | moin | <1.6.4 >=1.7.0 <1.7.1 | 1.6.4, 1.7.1 |