Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2022-36532
Disclosure Date: September 16, 2022 (last updated October 08, 2023)
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2021-40219
Disclosure Date: April 11, 2022 (last updated February 23, 2025)
Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.
0
Attacker Value
Unknown
CVE-2018-19933
Disclosure Date: December 17, 2018 (last updated November 27, 2024)
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.
0
