Cross-site scripting (XSS) vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving (1) registration or (2) editing of the user. Per: http://secunia.com/advisories/47784
'The vulnerability is confirmed in version 5.1.1. Other versions may also be affected.'
Publication date: Thu, 02 Feb 2012 23:55:00 +0000