Description
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | bolt/bolt | 3.2.14 | — | GHSA-5r9j-698h-2h5m |
Medium · 5.4
CVE-2017-11128
EUVD-2022-2649GHSA-5r9j-698h-2h5m
Bolt stored Cross-site Scripting (XSS)
Published Jul 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre