CVE-2011-3010

TWiki is affected by multiple XSS vulnerabilities in versions before 5.1.0. The issues stem from (1) the newtopic parameter in a WebCreateNewTopic action (tied to TWiki.WebCreateNewTopicTemplate) and (2) the query string to SlideShow.pm in the SlideShowPlugin. Affected component/entry: TWiki

PT-2011-4248

Name of the Vulnerable Software and Affected Versions TWiki versions prior to 5.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate...

CVE-2011-3010: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or 2 the query string to SlideShow.pm in the...