EIP-2026-105495

PRE-CVE

Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105495. PoCs published by Stefan Schurtz.

AI-analyzed exploit summary This exploit demonstrates multiple reflected XSS vulnerabilities in Bitweaver 2.8.1 by injecting malicious scripts into various input parameters. The PoC includes URLs with payloads that trigger JavaScript execution in the context of the affected site.

Description

Bitweaver 2.8.1 - Multiple Cross-Site Scripting Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stefan Schurtz · textwebappsphp

https://www.exploit-db.com/exploits/36177

View Code ZIP pw:eip

This exploit demonstrates multiple reflected XSS vulnerabilities in Bitweaver 2.8.1 by injecting malicious scripts into various input parameters. The PoC includes URLs with payloads that trigger JavaScript execution in the context of the affected site.

Classification

Working Poc 100%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Bitweaver 2.8.1

No auth needed

Prerequisites: Access to vulnerable Bitweaver instance · User interaction to visit crafted URLs

MITRE ATT&CK

T1059.007 - JavaScript

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026