{"action":"Upgrade moin to 1.9.3 or later.","affected":[{"fixed":"1.9.3","introduced":"0"}],"component":"moin","cve_ids":["CVE-2011-1058"],"ecosystem":"PyPI","epss":0.02538,"exploited":false,"fixed_versions":["1.9.3"],"ghsa_id":"GHSA-m9j7-xcj7-42j9","id":"tcs_01M5KG5JDH1NAAWPMRKVY880D2","modified_at":"2026-06-10T17:02:22.576586415Z","published_at":"2011-02-22T18:00:00Z","references":["https://osv.dev/vulnerability/PYSEC-2011-6","http://moinmo.in/SecurityFixes","http://secunia.com/advisories/43413","http://www.vupen.com/english/advisories/2011/0455","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html","http://secunia.com/advisories/43665","http://www.vupen.com/english/advisories/2011/0571","http://www.securityfocus.com/bid/46476","http://www.vupen.com/english/advisories/2011/0588","http://www.debian.org/security/2011/dsa-2321","http://www.ubuntu.com/usn/USN-1604-1","http://secunia.com/advisories/50885","https://exchange.xforce.ibmcloud.com/vulnerabilities/65545","https://github.com/advisories/GHSA-m9j7-xcj7-42j9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2011-6","url":"https://osv.dev/vulnerability/PYSEC-2011-6"}],"summary":"Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when \"format rst\" is set, allows remote atta"}