Executive brief
Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the page name in a rss link.
Affected products
- PyPI moin
Junglewise Threat Intelligence
CVE-2012-6082: PYSEC-2013-23 - Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote attackers to inject ar
CVE-2012-6082 · Severity: low · CVSS 3.1 · Published 2013-01-03
Technologies: moin (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-676 - MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature
- PYSEC-2026-670 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
- PYSEC-2026-677 - MoinMoin Improper Access Control
- PYSEC-2026-672 - MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
- PYSEC-2026-668 - MoinMoin Directory traversal vulnerability