PYSEC-2016-31

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/moin/PYSEC-2016-31.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2016-31
Aliases
Published
2016-11-10T17:59:00Z
Modified
2024-04-29T17:11:23.900603Z
Summary
[none]
Details

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.

References

Affected packages

PyPI / moin

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.9.9

Affected versions

1.*

1.8.4
1.8.5
1.8.6
1.8.7
1.9.0
1.9.1
1.9.2
1.9.3
1.9.4
1.9.5
1.9.6
1.9.7
1.9.8