https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-15275.htmlhttps://patchthecve.com/cve/CVE-2020-15275.htmlWed, 17 Jun 2026 02:56:24 +0000HIGH 8.7: MoinMoin is a wiki engine. In MoinMoin before version 1.9.11, an attacker with write permissions can upload an SVG file that contains malicious javascript. This javascript will be executed in a user's browser when the user is viewing that SVG file on the wiki. Users are strongly advised to upgrade thttps://patchthecve.com/cve/CVE-2020-25074.htmlhttps://patchthecve.com/cve/CVE-2020-25074.htmlWed, 17 Jun 2026 03:06:20 +0000CRITICAL 9.8: The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachments to the wiki can use this to achieve remote code execution.https://patchthecve.com/cve/CVE-2017-5934.htmlhttps://patchthecve.com/cve/CVE-2017-5934.htmlWed, 17 Jun 2026 01:21:28 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.