{"id":"CVE-2009-0312","aliases":["GHSA-cx94-3h5x-cc57","PYSEC-2026-676"],"title":"MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature","summary":"MoinMoin Cross-site scripting (XSS) vulnerability in the antispam feature","severity":"medium","vendor":"moin","product":"moin","ecosystem":"pip","affected":["moin < 1.8.2"],"patched":["moin 1.8.2"],"published":"2022-05-02","updated":"2026-07-06","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-cx94-3h5x-cc57","references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0312"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48306"},{"url":"https://usn.ubuntu.com/716-1"},{"url":"https://web.archive.org/web/20090323075215/http://hg.moinmo.in/moin/1.8/raw-file/1.8.2/docs/CHANGES"},{"url":"https://web.archive.org/web/20100825000634/http://hg.moinmo.in/moin/1.7/rev/89b91bf87dad"},{"url":"https://web.archive.org/web/20200228151935/http://hg.moinmo.in/moin/1.8/rev/89b91bf87dad"},{"url":"https://www.debian.org/security/2009/dsa-1715"},{"url":"http://moinmo.in/SecurityFixes#moin1.8.1"},{"url":"http://osvdb.org/51632"},{"url":"http://secunia.com/advisories/33716"},{"url":"http://secunia.com/advisories/33755"},{"url":"http://www.openwall.com/lists/oss-security/2009/01/27/4"}],"tags":["osv","pip"],"epss":0.02365,"epssPercentile":0.8305,"ingestedAt":"2026-07-08T18:25:48.609Z","slug":"CVE-2009-0312","body":"## Overview\n\nCross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.\n\n## Affected packages\n\n- `moin < 1.8.2`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `moin 1.8.2`","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0.5,"exploitation":0,"ransomware":0},"changes":[]}