CVE-2011-3010

TWiki is affected by multiple XSS vulnerabilities in versions before 5.1.0. The issues stem from (1) the newtopic parameter in a WebCreateNewTopic action (tied to TWiki.WebCreateNewTopicTemplate) and (2) the query string to SlideShow.pm in the SlideShowPlugin. Affected component/entry: TWiki

TWiki Cross Site Scripting

Information------------------ Name : XSS vulnerability in TWikiSoftware Versions: TWiki 5.0.2 and below. Vendor Homepage: http://twiki.org/ Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur Advisory Reference : NS-11-006 CVE : CVE-2011-3010...