Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:55:55 +0000 CVE-2020-15275 — malicious SVG attachment causing stored XSS vulnerability in MoinMoin https://cve.radiocsirt.org/vuln/cve-2020-15275 <p><strong>Affected:</strong> moinwiki moin-1.9</p> <p>MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user&#39;s browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.</p> <p><strong>Affected:</strong> moinwiki moin-1.9</p> <p>MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user&#39;s browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.</p> https://cve.radiocsirt.org/vuln/cve-2020-15275