Unrated severityNVD Advisory· Published May 20, 2011· Updated Apr 29, 2026
CVE-2011-1838
CVE-2011-1838
Description
Multiple cross-site scripting (XSS) vulnerabilities in TemplateLogin.pm in TWiki before 5.0.2 allow remote attackers to inject arbitrary web script or HTML via the origurl parameter to a (1) view script or (2) login script.
Affected products
20cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*range: <=5.0.1
- cpe:2.3:a:twiki:twiki:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:twiki:twiki:5.0.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2011-1838nvdPatch
- www.mavitunasecurity.com/XSS-vulnerability-in-Twiki/nvdExploit
- www.securityfocus.com/bid/47899nvdExploit
- secunia.com/advisories/44594nvdVendor Advisory
- www.vupen.com/english/advisories/2011/1258nvdVendor Advisory
- securityreason.com/securityalert/8257nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/518038/100/0/threadednvd
News mentions
0No linked articles in our index yet.