{"action":"Upgrade moin to 1.9.11 or later.","affected":[{"fixed":"1.9.11","introduced":"0"}],"component":"moin","cve_ids":["CVE-2020-15275"],"ecosystem":"PyPI","epss":0.01746,"exploited":false,"fixed_versions":["1.9.11"],"ghsa_id":"GHSA-4q96-6xhq-ff43","id":"tcs_01M5KG9ZWRPMEKR9DPHRCSHMDY","modified_at":"2023-11-08T04:02:36.383393Z","published_at":"2020-11-11T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-241","https://github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2","https://github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43","https://github.com/moinwiki/moin-1.9/releases/tag/1.9.11","https://advisory.checkmarx.net/advisory/CX-2020-4285"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-241","url":"https://osv.dev/vulnerability/PYSEC-2020-241"}],"summary":"MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's"}