CVE-2021-29025

CVE-2021-29025 concerns a cross-site scripting (XSS) vulnerability in Bitweaver 3.1.0 that permits remote attackers to inject JavaScript via the /users/my_images.php URI. The affected software is Bitweaver (web application framework/CMS) version 3.1.0; the vulnerable element is the /users/my_imag...