Vendors / Bolt Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 6
Exploited now Bolt records in CISA KEV No Bolt vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 59
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.24314 · Published 2022-09-16 · No fix listed
Priority MEDIUM 44
Bolt CMS <= 4.2 is vulnerable to Remote Code Execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03428 · Published 2022-04-11 · No fix listed CWE-94
Priority LOW 33
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03466 · Published 2018-12-17 · Fixed in 3.6.2 CWE-79
Open these records in search → All records by CVSS severity
0 6 4 0 0
