~/products/bolt/bolt_cms

pipeline liveDigest Docs

Bolt Cms vulnerabilities

3 known vulnerabilities affecting bolt/bolt_cms.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH2MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2022-36532P2HIGHCVSS 8.8≤ 5.1.122022-09-16

CVE-2022-36532 [HIGH] CVE-2022-36532: Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.

CVE-2018-19933P3MEDIUMCVSS 6.1PoCfixed in 3.6.22018-12-17

CVE-2018-19933 [MEDIUM] CWE-79 CVE-2018-19933: Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.

CVE-2021-40219P3HIGHCVSS 8.8≤ 4.2.02022-04-11

CVE-2021-40219 [HIGH] CWE-94 CVE-2021-40219: Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticat Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.