CVE-2021-29032

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI...

CVE-2021-29031

CVE-2021-29031 affects Bitweaver 3.1.0 with a cross-site scripting vulnerability that allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI. Multiple connected sources corroborate the issue and the affected component is Bitweaver’s web interface; root cause is an ...

CVE-2021-29031

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/usersimport.php URI...

CVE-2021-29030

Bitweaver 3.1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript via the /users/admin/index.php URI. The provided connected sources consistently identify the affected product/version and the injection path but do not supply deeper root-ca...

CVE-2021-29030

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI...

CVE-2021-29029

Bitweaver 3.1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject JavaScript through the /users/edit_personal_page.php URI. Root cause is unrelated input handling in that page, per multiple CVE references. Impact is variable depending on context but ...

CVE-2021-29029

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/editpersonalpage.php URI...

CVE-2021-29028

CVE-2021-29028 concerns Bitweaver 3.1.0 where an XSS flaw in the /users/admin/user_activity.php URI lets remote attackers inject JavaScript. The vulnerability is described across multiple sources as a cross‑site scripting issue; exploitation requires some user interaction per the CVSSv3.1 metrics...

CVE-2021-29028

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/useractivity.php URI...

CVE-2021-29027

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI...

CVE-2021-29027

CVE-2021-29027 describes a cross-site scripting (XSS) vulnerability in Bitweaver v3.1.0 , where an attacker can inject JavaScript via the /users/index.php URI. The connected documents confirm Bitweaver 3.1.0 is affected and show no explicit details on the root cause, exploit conditions, or availa...

CVE-2021-29026

CVE-2021-29026 is a reported cross-site scripting (XSS) vulnerability in Bitweaver 3.1.0, exploitable via the /users/admin/permissions.php URI. The affected component is Bitweaver’s web application, with the underlying issue described as an XSS flaw that allows remote attackers to inject JavaScri...

CVE-2021-29026

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI...

CVE-2021-29025

A cross-site scripting XSS vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/myimages.php URI...

CVE-2021-29025

CVE-2021-29025 concerns a cross-site scripting (XSS) vulnerability in Bitweaver 3.1.0 that permits remote attackers to inject JavaScript via the /users/my_images.php URI. The affected software is Bitweaver (web application framework/CMS) version 3.1.0; the vulnerable element is the /users/my_imag...

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/permissions.php URI...

Bitweaver 跨站脚本漏洞

Bitweaver is an open source content management system CMS. A security vulnerability exists in Bitweaver version 3.1.0, which can be exploited by remote attackers to inject JavaScript via the user admin edit group.php URI...

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/admin/useractivity.php URI...

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/index.php URI...

Bitweaver 跨站脚本漏洞

Bitweaver is a free, open source web application framework and content management system. A cross-site scripting vulnerability exists in Bitweaver 3.1.0. A remote attacker can exploit this vulnerability to inject JavaScript via the /users/preferences.php URI...