Read the docs
TI-2013-02330 Aliases CVE-2013-2651GHSA-hq7g-f3hc-wjxw

Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow…

Priority LOW 24CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) "p" or (2) content parameter to index.php.

Why it matters now

EPSS 0.0215 82nd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 59

CPEVersionsRoleVendor
cpe:2.3:a:boltwire:boltwire:*:*:*:*:*:*:*:*up to 3.5VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.0:*:*:*:*:*:*:*3.0VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.01:*:*:*:*:*:*:*3.01VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.02:*:*:*:*:*:*:*3.02VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.5:*:*:*:*:*:*:*3.2.5VulnerableBoltWire
  • cpe:2.3:a:boltwire:boltwire:*:*:*:*:*:*:*:* Versions up to 3.5 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·BoltWire
Show 49 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:boltwire:boltwire:3.2.6:*:*:*:*:*:*:*3.2.6VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.7:*:*:*:*:*:*:*3.2.7VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.8:*:*:*:*:*:*:*3.2.8VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.9:*:*:*:*:*:*:*3.2.9VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.10:*:*:*:*:*:*:*3.2.10VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.2.11:*:*:*:*:*:*:*3.2.11VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.03:*:*:*:*:*:*:*3.03VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3:*:*:*:*:*:*:*3.3VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.3:*:*:*:*:*:*:*3.3.3VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.4:*:*:*:*:*:*:*3.3.4VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.5:*:*:*:*:*:*:*3.3.5VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.6:*:*:*:*:*:*:*3.3.6VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.7:*:*:*:*:*:*:*3.3.7VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.8:*:*:*:*:*:*:*3.3.8VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.3.9:*:*:*:*:*:*:*3.3.9VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4:*:*:*:*:*:*:*3.4VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.04:*:*:*:*:*:*:*3.04VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.4:*:*:*:*:*:*:*3.4.4VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.5:*:*:*:*:*:*:*3.4.5VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.6:*:*:*:*:*:*:*3.4.6VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.7:*:*:*:*:*:*:*3.4.7VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.8:*:*:*:*:*:*:*3.4.8VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.9:*:*:*:*:*:*:*3.4.9VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.10:*:*:*:*:*:*:*3.4.10VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.11:*:*:*:*:*:*:*3.4.11VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.12:*:*:*:*:*:*:*3.4.12VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.13:*:*:*:*:*:*:*3.4.13VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.14:*:*:*:*:*:*:*3.4.14VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.15:*:*:*:*:*:*:*3.4.15VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.4.16:*:*:*:*:*:*:*3.4.16VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.05:*:*:*:*:*:*:*3.05VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.06:*:*:*:*:*:*:*3.06VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.07:*:*:*:*:*:*:*3.07VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.08:*:*:*:*:*:*:*3.08VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.09:*:*:*:*:*:*:*3.09VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.10:*:*:*:*:*:*:*3.10VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.11:*:*:*:*:*:*:*3.11VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.12:*:*:*:*:*:*:*3.12VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.13:*:*:*:*:*:*:*3.13VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.14:*:*:*:*:*:*:*3.14VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.15:*:*:*:*:*:*:*3.15VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.16:*:*:*:*:*:*:*3.16VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.17:*:*:*:*:*:*:*3.17VulnerableBoltWire
cpe:2.3:a:boltwire:boltwire:3.18:*:*:*:*:*:*:*3.18VulnerableBoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.03:*:*:*:*:*:*:* Versions 3.03 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.3.9:*:*:*:*:*:*:* Versions 3.3.9 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.04:*:*:*:*:*:*:* Versions 3.04 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.4:*:*:*:*:*:*:* Versions 3.4.4 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.5:*:*:*:*:*:*:* Versions 3.4.5 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.6:*:*:*:*:*:*:* Versions 3.4.6 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.7:*:*:*:*:*:*:* Versions 3.4.7 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.8:*:*:*:*:*:*:* Versions 3.4.8 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.9:*:*:*:*:*:*:* Versions 3.4.9 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.10:*:*:*:*:*:*:* Versions 3.4.10 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.11:*:*:*:*:*:*:* Versions 3.4.11 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.12:*:*:*:*:*:*:* Versions 3.4.12 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.13:*:*:*:*:*:*:* Versions 3.4.13 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.14:*:*:*:*:*:*:* Versions 3.4.14 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.15:*:*:*:*:*:*:* Versions 3.4.15 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.4.16:*:*:*:*:*:*:* Versions 3.4.16 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.05:*:*:*:*:*:*:* Versions 3.05 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.06:*:*:*:*:*:*:* Versions 3.06 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.07:*:*:*:*:*:*:* Versions 3.07 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.08:*:*:*:*:*:*:* Versions 3.08 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.09:*:*:*:*:*:*:* Versions 3.09 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.13:*:*:*:*:*:*:* Versions 3.13 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.15:*:*:*:*:*:*:* Versions 3.15 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.16:*:*:*:*:*:*:* Versions 3.16 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.17:*:*:*:*:*:*:* Versions 3.17 Vulnerable ·BoltWire
  • cpe:2.3:a:boltwire:boltwire:3.18:*:*:*:*:*:*:* Versions 3.18 Vulnerable ·BoltWire

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-2651
  2. 2026-10-03 Alias added: GHSA-hq7g-f3hc-wjxw

References

Exploit 2

  • TI-2023-25041 An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via… CVSS 3.1CRITICAL 9.1
  • TI-2022-08134 A cross-site scripting (XSS) vulnerability in BoltWire v7.10 and v 8.00 allows attackers… CVSS 3.1MEDIUM 6.1
  • TI-2013-00622 Cross-site scripting in BoltWire CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences