CVE-2010-2969 — Cross-site Scripting in Moinmoin

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Moinmo Moinmoin
Timeline
PublishedAug 5
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/LikePages.py, (2) action/chart.py, and (3) action/userprofile.py, a similar issue to CVE-2010-2487.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

â–¶NVDmoinmo/moinmoin1.7.3+46

🔴Vulnerability Details

3
GHSA
MoinMoin cross-site scripting (XSS) vulnerability↗2022-05-17
â–¶
OSV
MoinMoin cross-site scripting (XSS) vulnerability↗2022-05-17
â–¶
OSV
CVE-2010-2969: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1↗2010-08-05
â–¶

📋Vendor Advisories

1
Ubuntu
MoinMoin vulnerabilities↗2010-08-25
â–¶
CVE-2010-2969 — Cross-site Scripting in Moinmo Moinmoin | cvebase