GHSA-5r9j-698h-2h5m

ghsaUSosv

Bolt stored Cross-site Scripting (XSS)

view advisory published 2022-05-17Licence: CC-BY-4.0

Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2017-11128USmedium5.4—
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan