CVE-2011-1058

Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the refuri attribute. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
• http://moinmo.in/SecurityFixesPatch, Vendor Advisory
• http://secunia.com/advisories/43413Vendor Advisory
• http://secunia.com/advisories/43665
• http://secunia.com/advisories/50885
• http://www.debian.org/security/2011/dsa-2321
• http://www.securityfocus.com/bid/46476
• http://www.ubuntu.com/usn/USN-1604-1
• http://www.vupen.com/english/advisories/2011/0455Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0571
• http://www.vupen.com/english/advisories/2011/0588
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65545
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054544.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055116.html
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055124.html
• http://moinmo.in/SecurityFixesPatch, Vendor Advisory
• http://secunia.com/advisories/43413Vendor Advisory
• http://secunia.com/advisories/43665
• http://secunia.com/advisories/50885
• http://www.debian.org/security/2011/dsa-2321
• http://www.securityfocus.com/bid/46476
• http://www.ubuntu.com/usn/USN-1604-1
• http://www.vupen.com/english/advisories/2011/0455Vendor Advisory
• http://www.vupen.com/english/advisories/2011/0571
• http://www.vupen.com/english/advisories/2011/0588
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65545

Published

Feb 22, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1052Integer overflow in the PSX/GEOS input file loaders in Hex-R…
• CVE-2011-1053Unspecified vulnerability in the Mach-O input file loader in…
• CVE-2011-1054Unspecified vulnerability in the PEF input file loader in He…
• CVE-2011-1055SQL injection vulnerability in api/ice_media.cfc in Lingxia …
• CVE-2011-1056The installer for Metasploit Framework 3.5.1, when running o…
• CVE-2011-1057Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2011-1059Use-after-free vulnerability in WebCore in WebKit before r77…
• CVE-2011-1060SQL injection vulnerability in the member function in classe…
• CVE-2011-1061SQL injection vulnerability in memberlist.php in WSN Guest 1…
• CVE-2011-1062Multiple cross-site scripting (XSS) vulnerabilities in inclu…
• CVE-2011-1063Multiple cross-site scripting (XSS) vulnerabilities in Cherr…
• CVE-2011-1064SQL injection vulnerability in member/list.php in qibosoft Q…