Vulnerabilities

TI-2022-16851 CVE-2022-36532 · GHSA-hmmj-pppq-vw96

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an…

MEDIUM 59

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.24314 Published 2022-09-16 No fix listed

TI-2021-17367 CVE-2021-40219 · GHSA-gprh-7767-cw39

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution.

MEDIUM 44

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03428 Published 2022-04-11 No fix listed CWE-94

TI-2018-14123 CVE-2018-19933 · GHSA-gjx6-58xh-p7pw

Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the…

LOW 33

Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03466 Published 2018-12-17 Fixed in 3.6.2 CWE-79

Vulnerabilities

Filters

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an…

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution.

Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the…