365 matches found
CVE-2021-29029
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...
Cross site scripting
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...
Cross site scripting
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI...
Cross site scripting
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/useractivity.php URI...
CVE-2021-29025
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/myimages.php URI...
Cross site scripting
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/myimages.php URI...
CVE-2021-29033
CVE-2021-29033 is an XSS vulnerability in Bitweaver 3.1.0 that allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI. Multiple sources (NVD, Red Hat, CVE lists) corroborate the issue. The CVSSv3.1 vector reveals a NETWORK attack, LOW integrity/LOW confidentiality im...
CVE-2021-29033
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/editgroup.php URI...
CVE-2021-29032
Bitweaver 3.1.0 contains a cross-site scripting (XSS) vulnerability exploitable via the /users/preferences.php URI. All connected sources confirm the issue as a Bitweaver XSS in version 3.1.0, but no concrete exploit steps, impacted versions beyond 3.1.0, or remediation details are provided in th...
CVE-2021-29032
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI...
CVE-2021-29031
CVE-2021-29031 affects Bitweaver 3.1.0 with a cross-site scripting vulnerability that allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI. Multiple connected sources corroborate the issue and the affected component is Bitweaver’s web interface; root cause is an ...
CVE-2021-29031
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/usersimport.php URI...
CVE-2021-29030
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...
CVE-2021-29030
Bitweaver 3.1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript via the /users/admin/index.php URI. The provided connected sources consistently identify the affected product/version and the injection path but do not supply deeper root-ca...
CVE-2021-29029
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...
CVE-2021-29029
Bitweaver 3.1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript through the /users/edit_personal_page.php URI. Root cause is unrelated input handling in that page, per multiple CVE references. Impact is variable depending on context but ...
CVE-2021-29028
A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/useractivity.php URI...
CVE-2021-29028
CVE-2021-29028 concerns Bitweaver 3.1.0 where an XSS flaw in the /users/admin/user_activity.php URI lets remote attackers inject JavaScript. The vulnerability is described across multiple sources as a cross‑site scripting issue; exploitation requires some user interaction per the CVSSv3.1 metrics...
CVE-2021-29027
CVE-2021-29027 describes a cross-site scripting (XSS) vulnerability in Bitweaver v3.1.0 , where an attacker can inject JavaScript via the /users/index.php URI. The connected documents confirm Bitweaver 3.1.0 is affected and show no explicit details on the root cause, exploit conditions, or availa...