Unscored CVE-2021-29032 EUVD-2021-15678GHSA-435g-2c3j-fwg8

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferenc…

Published Mar 24, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI.

References

https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md