CVE-2010-2487

MoinMoin < 1.7.3, 1.8.x < 1.8.8, 1.9.x < 1.9.3 - Cross-Site Scripting via Crafted Content

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) Page.py, (2) PageEditor.py, (3) PageGraphicalEditor.py, (4) action/CopyPage.py, (5) action/Load.py, (6) action/RenamePage.py, (7) action/backup.py, (8) action/login.py, (9) action/newaccount.py, and (10) action/recoverpass.py.

References (17)

Core 17
Core References
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.8/rev/4238b0c90871
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1981
Various Sources x_refsource_confirm
http://moinmo.in/MoinMoinRelease1.9
Vendor Advisory x_refsource_confirm
http://moinmo.in/SecurityFixes
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40549
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.9/rev/68ba3cc79513
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2010/dsa-2083
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.9/rev/e50b087c4572
Various Sources x_refsource_confirm
http://moinmo.in/MoinMoinRelease1.8
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584809
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127799369406968&w=2
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127809682420259&w=2
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.8/raw-file/1.8.8/docs/CHANGES
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.9/raw-file/1.9.3/docs/CHANGES
Various Sources x_refsource_confirm
http://hg.moinmo.in/moin/1.7/rev/37306fba2189
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40836

Scores

EPSS 0.0266
EPSS Percentile 84.1%

Details

CWE
CWE-79
Status published
Products (36)
moinmo/moinmoin 0.1
moinmo/moinmoin 0.2
moinmo/moinmoin 0.3
moinmo/moinmoin 0.4
moinmo/moinmoin 0.5
moinmo/moinmoin 0.6
moinmo/moinmoin 0.7
moinmo/moinmoin 0.8
moinmo/moinmoin 0.9
moinmo/moinmoin 0.10
... and 26 more
Published Aug 05, 2010
Tracked Since Feb 18, 2026