Bolt vulnerabilities

Products

• Cms 5
• Cms 4
• Bolt 2

Newest

• bolt core Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering CVE-2026-71291 8.8 HighAugust 5, 2026
• bolt cms Bolt CMS HTML Attribute TextType.php HTML injection CVE-2026-11511 5.1 MediumJune 8, 2026
• bolt cms, boltcms bolt +1 more Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename CVE-2025-34086 Public exploit 7.5 HighJuly 3, 2025
• bolt cms, boltcms bolt +1 more Bolt CMS Showcase Creation showcases cross site scripting CVE-2024-7300 5.3 MediumJuly 31, 2024
• bolt cms, boltcms bolt +1 more Bolt CMS Entry Preview page cross site scripting CVE-2024-7299 5.3 MediumJuly 31, 2024
• bolt cms Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user... CVE-2022-36532 Public exploit EPSS 24.3% 8.8 HighSeptember 16, 2022
• bolt cms Code Injection in Bolt CMS CVE-2021-40219 8.8 HighApril 11, 2022
• bolt The filename of uploaded files vulnerable to stored XSS in Bolt CMS CVE-2020-4041 Fix available 7.4 HighJune 8, 2020
• bolt CSRF issue on preview pages in Bolt CMS CVE-2020-4040 Public exploitFix available 8.6 HighJune 8, 2020
• bolt cms Bolt Cross-site Scripting (XSS) via text input click preview button CVE-2018-19933 Public exploitFix available 6.1 MediumDecember 17, 2018