Cross site scripting

2021-03-2413:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.2%

JSON

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI.

CPENameOperatorVersion
bitweavereq3.1.0

CPE	Name	Operator	Version
	bitweaver	eq	3.1.0

References

github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md

0.001 Low

EPSS

Percentile

31.2%

JSON

Related for PRION:CVE-2021-29033