Unrated severityNVD Advisory· Published Oct 18, 2010· Updated Jun 16, 2026
CVE-2010-3841
CVE-2010-3841
Description
Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
25cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 24 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: <=5.0.0
- cpe:2.3:a:twiki:twiki:2000-12-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2001-09-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2001-12-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2003-02-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-01:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-02:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-03:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:2004-09-04:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.2:*:*:*:*:*:*:*
- (no CPE)range: <5.0.1
Patches
Vulnerability mechanics
References
4- twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2010-3841nvdExploitPatchVendor Advisory
- www.securityfocus.com/bid/44103nvdExploit
- secunia.com/advisories/41796nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/62557nvd
News mentions
0No linked articles in our index yet.