bolt/bolt vulnerabilities (Packagist)

15 vulnerabilities.

• bolt/bolt Packagist Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename CVE-2025-34086 Public exploit 7.5 HighJuly 3, 2025
• bolt/bolt Packagist Bolt CMS Showcase Creation showcases cross site scripting CVE-2024-7300 5.3 MediumJuly 31, 2024
• bolt/bolt Packagist OS Command injection in Bolt CVE-2020-28925 Fix available 5.3 MediumDecember 30, 2020
• bolt/bolt Packagist The filename of uploaded files vulnerable to stored XSS in Bolt CMS CVE-2020-4041 Fix available 7.4 HighJune 8, 2020
• bolt/bolt Packagist CSRF issue on preview pages in Bolt CMS CVE-2020-4040 Public exploitFix available 8.6 HighJune 8, 2020
• bolt/bolt Packagist Bolt Cross-site Scripting via the slug, teaser or title parameters CVE-2019-9553 Public exploit 6.1 MediumDecember 31, 2019
• bolt/bolt Packagist Cross-site Scripting in Bolt CVE-2019-15485 Fix available 6.1 MediumAugust 23, 2019
• bolt/bolt Packagist Bolt Cross-site Scripting (XSS) via an image's alt or title field CVE-2019-15484 Fix available 6.1 MediumAugust 23, 2019
• bolt/bolt Packagist Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log CVE-2019-15483 Fix available 6.1 MediumAugust 23, 2019
• bolt/bolt Packagist Bolt Cross Site Request Forgery (CSRF) CVE-2019-10874 Public exploitFix available 8.8 HighApril 5, 2019
• bolt/bolt Packagist Bolt Unrestricted Upload of File with Dangerous Type CVE-2019-9185 Fix available 8.8 HighMarch 7, 2019
• bolt/bolt Packagist Bolt Cross-site Scripting (XSS) via text input click preview button CVE-2018-19933 Public exploitFix available 6.1 MediumDecember 17, 2018
• bolt/bolt Packagist Bolt Improper Access Control CVE-2017-16754 Fix available 5.3 MediumNovember 9, 2017
• bolt/bolt Packagist Bolt stored Cross-site Scripting (XSS) CVE-2017-11128 5.4 MediumJuly 17, 2017
• bolt/bolt Packagist Bolt CMS Stored XSS CVE-2017-11127 5.4 MediumJuly 17, 2017