MoinMoin Cross-site Scripting (XSS) vulnerability

MEDIUM 6.1CVE-2016-9119 · GHSA-5fq5-pfv8-mrfv · PYSEC-2017-20 · Published 30/01/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
moin PyPI	`< 1.9.8`	`1.9.8`
moinmoin moinmo	`≤ 1.9.7`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

nvd.nist.gov/vuln/detail/CVE-2016-9119 · ADVISORY
moinwiki/moin · PACKAGE
pypa/advisory-database · WEB
moinmo.in/SecurityFixes · WEB
web.archive.org/web/20200227212253/http://www.securityfocus.com/bid/94501 · WEB
debian.org/security/2016/dsa-3715 · WEB
securityfocus.com/bid/94501 · WEB
ubuntu.com/usn/USN-3137-1 · WEB
GitHub Advisory GHSA-5fq5-pfv8-mrfv · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free