{"id":"CVE-2010-3841","aliases":["EUVD-2010-3820","GHSA-gx4x-mg2h-gqh7"],"status":"published","title":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow...","description":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0305,"percentile":0.87642,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-79"],"published":"2010-10-18T16:00:00Z","modified":"2026-06-16T23:23:39Z","exploits":[{"source":"exploitdb","id":"EDB-34842","title":"TWiki 5.0 - '/bin/view?rev' Cross-Site Scripting","type":"webapps","platform":"php","date":"2010-10-14","verified":true,"url":"https://www.exploit-db.com/exploits/34842"},{"source":"exploitdb","id":"EDB-34843","title":"TWiki 5.0 - bin/login Multiple Cross-Site Scripting Vulnerabilities","type":"webapps","platform":"php","date":"2010-10-14","verified":true,"url":"https://www.exploit-db.com/exploits/34843"}],"products":[{"vendor":"twiki","product":"twiki"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/62557","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/41796","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2010-3841","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/44103","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3841"},{"url":"https://github.com/advisories/GHSA-gx4x-mg2h-gqh7"}],"sources":{"cve":[{"id":"CVE-2010-3841","description":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.","status":"published","published":"2010-10-18T16:00:00Z","modified":"2024-08-07T03:26:12.232Z","updated_at":"2026-11-02T14:33:27.739358Z"}],"euvd":[{"id":"EUVD-2010-3820","description":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.","status":"published","published":"2010-10-18T16:00:00Z","modified":"2024-08-07T03:26:12Z","updated_at":"2026-11-03T01:39:32.539513Z"}],"ghsa":[{"id":"GHSA-gx4x-mg2h-gqh7","title":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow...","description":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.","status":"published","published":"2022-05-17T02:05:13Z","modified":"2023-01-27T05:01:09Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:41:49.563138Z"}],"nvd":[{"id":"CVE-2010-3841","description":"Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the rev parameter to the view script or (2) the query string to the login script.","status":"published","published":"2010-10-18T17:00:04.063Z","modified":"2026-06-16T23:23:39.25Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:01:57.065463Z"}]}}