Priority MEDIUM 41
Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00549 · Published 2026-08-05 · No fix listed CWE-1336
Priority MEDIUM 56
A weakness has been identified in Bolt CMS up to 3.7.5.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00191 · Published 2026-06-08 · No fix listed CWE-74
Priority MEDIUM 48
Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.
CVSS 4.0HIGH 7.5· Network · Low privileges · User interaction · EPSS 0.04322 · Published 2025-07-03 · No fix listed CWE-434
Priority MEDIUM 57
A vulnerability classified as problematic has been found in Bolt CMS 3.7.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00403 · Published 2024-07-31 · No fix listed CWE-79
Priority MEDIUM 57
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00393 · Published 2024-07-31 · No fix listed CWE-79
Priority MEDIUM 59
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.24314 · Published 2022-09-16 · No fix listed
Priority MEDIUM 44
Bolt CMS <= 4.2 is vulnerable to Remote Code Execution.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03428 · Published 2022-04-11 · No fix listed CWE-94
Priority LOW 37
In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS.
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.02077 · Published 2020-06-08 · Fixed in 3.7.1 CWE-79
Priority MEDIUM 41
Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01766 · Published 2020-06-08 · Fixed in 3.7.1 CWE-352
Priority LOW 33
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03466 · Published 2018-12-17 · Fixed in 3.6.2 CWE-79
THREATIST.IORead the docs