CVE-2011-1058
moinmo moinmoin: no CVSS score yet. EPSS 2.5% chance of exploitation in the next 30 days. Fixed in moin 1.9.3.
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.
- EPSS
- 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmo:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-m9j7-xcj7-42j9 | PyPI | moin | <1.9.3 | 1.9.3 |
| PYSEC-2011-6 | PyPI | moin | <1.9.3 | 1.9.3 |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
- http://moinmo.in/SecurityFixes
- http://secunia.com/advisories/43413