EIP-2026-105496

This exploit demonstrates a persistent XSS vulnerability in bitweaver 2.8.1 by injecting malicious JavaScript into the 'author_name' field during article submission. It also mentions SQL injection vulnerabilities in test mode via unsanitized 'sort_mode' parameters.