CVE-2011-3010

TWiki is affected by multiple XSS vulnerabilities in versions before 5.1.0. The issues stem from (1) the newtopic parameter in a WebCreateNewTopic action (tied to TWiki.WebCreateNewTopicTemplate) and (2) the query string to SlideShow.pm in the SlideShowPlugin. Affected component/entry: TWiki

CVE-2011-3010: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via 1 the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or 2 the query string to SlideShow.pm in the...