CVSS 3.0
6.1 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2016-7146
Medium (6.1) in moinmo moinmoin. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in moin 1.9.9.
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-11-01)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- moinmo:moinmoin
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fj26-q4vh-85f6 | PyPI | moin | >=1.9.8 <1.9.9 | 1.9.9 |
| PYSEC-2016-30 | PyPI | moin | <1.9.9 | 1.9.9 |