https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-29033.htmlhttps://patchthecve.com/cve/CVE-2021-29033.htmlWed, 17 Jun 2026 03:47:10 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI.https://patchthecve.com/cve/CVE-2021-29032.htmlhttps://patchthecve.com/cve/CVE-2021-29032.htmlWed, 17 Jun 2026 03:47:10 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI.https://patchthecve.com/cve/CVE-2021-29031.htmlhttps://patchthecve.com/cve/CVE-2021-29031.htmlWed, 17 Jun 2026 03:47:10 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI.https://patchthecve.com/cve/CVE-2021-29030.htmlhttps://patchthecve.com/cve/CVE-2021-29030.htmlWed, 17 Jun 2026 03:47:10 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI.https://patchthecve.com/cve/CVE-2021-29029.htmlhttps://patchthecve.com/cve/CVE-2021-29029.htmlWed, 17 Jun 2026 03:47:10 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_personal_page.php URI.https://patchthecve.com/cve/CVE-2021-29028.htmlhttps://patchthecve.com/cve/CVE-2021-29028.htmlWed, 17 Jun 2026 03:47:09 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user_activity.php URI.https://patchthecve.com/cve/CVE-2021-29027.htmlhttps://patchthecve.com/cve/CVE-2021-29027.htmlWed, 17 Jun 2026 03:47:09 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI.https://patchthecve.com/cve/CVE-2021-29026.htmlhttps://patchthecve.com/cve/CVE-2021-29026.htmlWed, 17 Jun 2026 03:47:09 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI.https://patchthecve.com/cve/CVE-2021-29025.htmlhttps://patchthecve.com/cve/CVE-2021-29025.htmlWed, 17 Jun 2026 03:47:09 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.php URI.https://patchthecve.com/cve/CVE-2012-5193.htmlhttps://patchthecve.com/cve/CVE-2012-5193.htmlTue, 16 Jun 2026 23:46:24 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the path info to (1) stats/index.php or (2) newsletters/edition.php or the (3) username parameter to users/remind_password.php, (4) days parameter to shttps://patchthecve.com/cve/CVE-2012-5192.htmlhttps://patchthecve.com/cve/CVE-2012-5192.htmlTue, 16 Jun 2026 23:46:24 +0000MEDIUM 5.0: Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter.