CVE-2018-20212

CVE-2018-20212 affects TWiki 6.0.2, specifically the bin/statistics component, where the webs parameter enables cross-site scripting (XSS). The vulnerability is described as a parameter-based XSS in TWiki/bin/statistics, with CVSS vectors indicating network attack, low to moderate complexity, and...

TWiki bin/statistics cross-site scripting vulnerability

TWiki is a WIKI encyclopedia program. A cross-site scripting vulnerability exists in TWiki bin/statistics. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...