5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.008 Low
EPSS
Percentile
81.1%
Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.
archives.neohapsis.com/archives/bugtraq/2011-09/0142.html
develop.twiki.org/trac/changeset/21920
secunia.com/advisories/46123
securitytracker.com/id?1026091
twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2011-3010
www.mavitunasecurity.com/xss-vulnerability-in-twiki5
www.osvdb.org/75673
www.osvdb.org/75674
www.securityfocus.com/bid/49746