CVE-2006-6925

CVE-2006-6925 describes multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier, allowing remote attackers to inject arbitrary web script or HTML. Specifically, these issues arise from insufficient sanitization of the message title field when submitting articles or blog posts, and the message description field when editing in the Sandbox. With a CVSS score of 6.8, this vulnerability is considered medium severity, as it can be exploited remotely with medium attack complexity, potentially leading to information disclosure, integrity compromise, and denial of service. While no active exploitation or public exploit code (Metasploit, Nuclei) is noted for this specific XSS, an unrelated SQL injection for bitweaver 1.x is listed on ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.