GHSA-2g23-qmmp-fvmr

ghsaUSosv

Bolt Cross-site Scripting via the slug, teaser or title parameters

view advisory published 2022-05-24Licence: CC-BY-4.0

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to `editcontent/pages`, a related issue to CVE-2017-11128 and CVE-2018-19933.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-9553US	medium6.1	1.75% (78th)	Exploit	2019-12-31
Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.