PT-2014-8965

Name of the Vulnerable Software and Affected Versions TWiki versions 6.0.0 through 6.0.1 Description The issue is related to an incomplete blacklist vulnerability in the urlEncode function in lib/TWiki.pm. This allows remote attackers to conduct cross-site scripting XSS attacks via a single quote...