CVE-2011-3010: Twiki

Medium severity, CVSS 4.3. EPSS: 5.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.

Affected products

• Twiki Twiki: up to and including 5.0.1; version 4.0 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …

Published 2011-09-30. Last modified 2026-06-16.