GHSA-cj8p-53v9-2c26

ghsaUSosv

Cross-site Scripting in Bolt

view advisory published 2019-11-08Licence: CC-BY-4.0

Bolt before 3.6.10 has XSS via createFolder or createFile in `Controller/Async/FilesystemManager.php`.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-15485USmedium6.1—
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan