{"action":"Upgrade moin to 1.9.11 or later.","affected":[{"fixed":"1.9.11","introduced":"0"}],"component":"moin","cve_ids":["CVE-2020-15275"],"ecosystem":"PyPI","epss":0.01746,"exploited":false,"fixed_versions":["1.9.11"],"ghsa_id":"GHSA-4q96-6xhq-ff43","id":"tcs_01M5KEYSQ7XDEZ54A4BN4V3WZA","modified_at":"2026-07-08T06:00:33.060527041Z","published_at":"2020-11-11T15:54:41Z","references":["https://osv.dev/vulnerability/GHSA-4q96-6xhq-ff43","https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43","https://nvd.nist.gov/vuln/detail/CVE-2020-15275","https://github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2","https://advisory.checkmarx.net/advisory/CX-2020-4285","https://github.com/moinwiki/moin-1.9","https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11","https://github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2020-241.yaml","https://pypi.org/project/moin"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-4q96-6xhq-ff43","url":"https://osv.dev/vulnerability/GHSA-4q96-6xhq-ff43"}],"summary":"malicious SVG attachment causing stored XSS vulnerability"}