High severity8.7NVD Advisory· Published Nov 11, 2020· Updated Jun 17, 2026
CVE-2020-15275
CVE-2020-15275
Description
MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade to a patched version. MoinMoin Wiki 1.9.11 has the necessary fixes and also contains other important fixes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
moinPyPI | < 1.9.11 | 1.9.11 |
Affected products
5- moinwiki/moin-1.9v5Range: < 1.9.11
- ghsa-coords3 versionspkg:pypi/moinpkg:rpm/opensuse/moinmoin-wiki&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/moinmoin-wiki&distro=SUSE%20Package%20Hub%2015%20SP2
< 1.9.11+ 2 more
- (no CPE)range: < 1.9.11
- (no CPE)range: < 1.9.11-lp152.3.3.1
- (no CPE)range: < 1.9.11-bp152.4.3.1
Patches
Vulnerability mechanics
References
8- github.com/moinwiki/moin-1.9/commit/31de9139d0aabc171e94032168399b4a0b2a88a2nvdPatchThird Party AdvisoryWEB
- advisory.checkmarx.net/advisory/CX-2020-4285nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-4q96-6xhq-ff43ghsaADVISORY
- github.com/moinwiki/moin-1.9/releases/tag/1.9.11nvdRelease NotesThird Party AdvisoryWEB
- github.com/moinwiki/moin-1.9/security/advisories/GHSA-4q96-6xhq-ff43nvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2020-15275ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/moin/PYSEC-2020-241.yamlghsaWEB
- pypi.org/project/moinghsaWEB
News mentions
0No linked articles in our index yet.