Security
فارسی
All products

bolt/bolt

Composer · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CSRF issue on preview pages in Bolt CMSCVE-2020-4040 · GHSA-2Q66-6CC3-6XM8 bolt/bolt Composer High Fix reported
The filename of uploaded files vulnerable to stored XSSCVE-2020-4041 · GHSA-68Q3-7WJP-7Q3J bolt/bolt Composer High Fix reported
Bolt CMS vulnerable to authenticated remote code executionCVE-2025-34086 · GHSA-P9QC-8JJX-G8CG bolt/bolt Composer High No fix reported
Bolt CMS Cross-site Scripting vulnerabilityCVE-2024-7300 · GHSA-XHQW-4HCQ-FCVR bolt/bolt Composer Medium No fix reported
Bolt Cross-site Scripting (XSS) via text input click preview buttonCVE-2018-19933 · GHSA-GJX6-58XH-P7PW bolt/bolt Composer Medium Fix reported
Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system logCVE-2019-15483 · GHSA-PH84-VG7Q-FQQ8 bolt/bolt Composer Medium Fix reported
Bolt Cross-site Scripting (XSS) via an image's alt or title fieldCVE-2019-15484 · GHSA-FP8M-XW3F-6H7X bolt/bolt Composer Medium Fix reported
Bolt Cross-site Scripting via the slug, teaser or title parametersCVE-2019-9553 · GHSA-2G23-QMMP-FVMR bolt/bolt Composer Medium No fix reported
Bolt Cross Site Request Forgery (CSRF)CVE-2019-10874 · GHSA-3G6C-88PF-M46F bolt/bolt Composer High Fix reported
Bolt Unrestricted Upload of File with Dangerous TypeCVE-2019-9185 · GHSA-GMG5-F2GM-P3H7 bolt/bolt Composer High Fix reported
Bolt Improper Access ControlCVE-2017-16754 · GHSA-WR23-M9M2-JJF4 bolt/bolt Composer Medium Fix reported
Bolt stored Cross-site Scripting (XSS)CVE-2017-11128 · GHSA-5R9J-698H-2H5M bolt/bolt Composer Medium No fix reported
Cross-site Scripting in BoltCVE-2019-15485 · GHSA-CJ8P-53V9-2C26 bolt/bolt Composer Medium Fix reported
Bolt CMS Stored XSSCVE-2017-11127 · GHSA-HQXC-W9VW-3HP5 bolt/bolt Composer Medium No fix reported
OS Command injection in BoltCVE-2020-28925 · GHSA-W8CJ-MVF9-MPC9 bolt/bolt Composer Medium Fix reported