MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) component.
MoinMoin 1.9.8 permite a atacantes remotos llevar a cabo ataques "JavaScript injection" utilizando el enfoque "page creation", relacionado con un problema "Cross Site Scripting (XSS)" que afecta al componente action=fckdialog&dialog=attachment (a través del nombre de página).
It was discovered that MoinMoin did not properly sanitize certain inputs, resulting in cross-site scripting vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain.
