CVE-2006-6925

no score yetEPSS 2.2%

Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the message title field when submitting an article to articles/edit.php, (2) the message title field when submitting a blog post to blogs/post.php, or (3) the message description field when editing in the Sandbox in wiki/edit.php.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2007-01-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bitweaver:bitweaver

References

http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html
http://secunia.com/advisories/22793
http://securityreason.com/securityalert/2144
http://www.securityfocus.com/bid/20988
http://www.securityfocus.com/bid/20996

Check your stack JSON