Skip to content
OpenAdvisories

Package · Packagist

bolt/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2021-40219

    Code Injection in Bolt CMS

    Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.

    bolt/core Packagist
  • High —
    CVE-2021-27367

    Path traversal in bolt/core

    Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.

    bolt bolt/core Azure Linux Packagist