CVE-2021-29026: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI...

PT-2021-18030

Name of the Vulnerable Software and Affected Versions: Bitweaver version 3.1.0 Description: A cross-site scripting XSS issue allows remote attackers to inject JavaScript via the "/users/admin/permissions.php" API endpoint. This enables attackers to execute malicious scripts on the client-side...