PT-2011-4248

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 5.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate...

CVE-2011-3010: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or 2 the query string to SlideShow.pm in the...