Approved changes feed: RSS · Atom

cpe:2.3:a:twiki:twiki:4.3.2:*:*:*:*:*:*:*

part: a version: 4.3.2 update: *

VendorTwiki (3a715e6b-0582-5b8f-8e4f-000ddecce81e)
ProductTwiki (3cf8f6ac-b426-5e8a-bd57-f1b5cdff3037)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:rpm/opensuse/twiki purl2cpe 2026-06-01 10:12:44.350005
pkg:sourceforge/twiki purl2cpe 2026-06-01 10:12:44.350007

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3010 vulnerable 2026-06-08 04:58:10.292681 Details available
Multiple cross-site scripting (XSS) vulnerabilities in TWiki before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the newtopic parameter in a WebCreateNewTopic action, related to the TWiki.WebCreateNewTopicTemplate topic; or (2) the query string to SlideShow.pm in the SlideShowPlugin.
Published: 2011-09-30T10:00:00.000Z
Updated: 2024-09-17T03:03:48.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1838 vulnerable 2026-06-08 04:58:02.350647 Details available
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.
Published: 2011-05-20T22:00:00.000Z
Updated: 2024-08-06T22:37:26.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3841 vulnerable 2026-06-08 04:55:17.508136 Details available
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.
Published: 2010-10-18T16:00:00.000Z
Updated: 2024-08-07T03:26:12.232Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.