CVE-2010-2970 — Cross-site Scripting in Moinmoin

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Moinmo Moinmoin
Timeline
PublishedAug 5
Latest updateMay 17

Description

Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py, (2) action/anywikidraw.py, and (3) action/language_setup.py, a similar issue to CVE-2010-2487.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDmoinmo/moinmoin1.9.0, 1.9.1, 1.9.2+2

🔴Vulnerability Details

3
GHSA
MoinMoin cross-site scripting (XSS) vulnerability↗2022-05-17
▶
OSV
MoinMoin cross-site scripting (XSS) vulnerability↗2022-05-17
▶
OSV
CVE-2010-2970: Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1↗2010-08-05
▶

📋Vendor Advisories

1
Ubuntu
MoinMoin vulnerabilities↗2010-08-25
▶
CVE-2010-2970 — Cross-site Scripting in Moinmo Moinmoin | cvebase