CVE-2011-1838

Vulnerability summary: TWiki before 5.0.2 contains multiple XSS flaws in TemplateLogin.pm, exploitable via the origurl parameter in both the view and login scripts. The OpenVAS NASL entry and CVE records corroborate the vulnerable module and vector. Impact (as described): cross-site scripting cou...

CVE-2011-1838

Multiple cross-site scripting XSS vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a 1 view script or 2 login script...