CVE-2016-7146
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2016-11-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-79
Affected products
References
- http://www.debian.org/security/2016/dsa-3715
- http://www.securityfocus.com/bid/94259
- http://www.ubuntu.com/usn/USN-3137-1
- https://www.curesec.com/blog/article/blog/MoinMoin-198-XSS-175.html
