Skip to content
OpenAdvisories

Package · Packagist

bolt/bolt

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2019-9553 Public exploit

    Bolt Cross-site Scripting via the slug, teaser or title parameters

    Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

    bolt/bolt Packagist
  • Medium 6.1
    CVE-2018-19933 Public exploit

    Bolt Cross-site Scripting (XSS) via text input click preview button

    Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.

    bolt/bolt Packagist