CVE-2009-0312: Moinmoin

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the antispam feature (security/antispam.py) in MoinMoin 1.7 and 1.8.1 allows remote attackers to inject arbitrary web script or HTML via crafted, disallowed content.

Affected products

• Moinmoin Moinmoin: version 1.7.0 only; version 1.8.1 only

Published 2009-01-28. Last modified 2026-06-16.