Cross site scripting

Cross-site scripting XSS vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM% variable...

CVE-2008-5304

TWiki is affected by CVE-2008-5304: a cross-site scripting (XSS) vulnerability in TWiki before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via the %URLPARAM{}% variable. Affected product/version: TWiki