Description
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | bolt/bolt | <= 3.2.14 | — | GHSA-hqxc-w9vw-3hp5 |
Medium · 5.4
CVE-2017-11127
EUVD-2022-4198GHSA-hqxc-w9vw-3hp5
Bolt CMS Stored XSS
Published Jul 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre