moinmoin -- cross-site scripting via RST parserentered 2012-09-05
no CVE referenced
CVE details
CVE-2011-1058
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.
- Score
- 2.6 low
- Published
- 2011-02-22
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.