CVE-2016-7146

PoC —

CVSS 3.0

6.1 medium

EPSS

1%p66

Published

Nov 10, 2016 (Nov 10, 2016)

Modified

Jun 17, 2026

Description

MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.

Vendors: moinmo
Products: moinmoin
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.