Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| moinmoin / moinmoin | 1.6.3 | 1.6.3.x |
| moinmoin / moinmoin | 1.7.0 | 1.7.0.x |