CVE-2009-0312
moinmoin moinmoin: no CVSS score yet. EPSS 2.4% chance of exploitation in the next 30 days. Fixed in moin 1.8.2.
Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmoin:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cx94-3h5x-cc57 | PyPI | moin | <1.8.2 | 1.8.2 |
| PYSEC-2026-676 | PyPI | moin | <1.8.2 | 1.8.2 |