Boltcms Bolt vulnerabilities

• bolt cms, boltcms bolt +1 more Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename CVE-2025-34086 Public exploit 7.5 HighJuly 3, 2025
• bolt cms, boltcms bolt +1 more Bolt CMS Showcase Creation showcases cross site scripting CVE-2024-7300 5.3 MediumJuly 31, 2024
• bolt cms, boltcms bolt +1 more Bolt CMS Entry Preview page cross site scripting CVE-2024-7299 5.3 MediumJuly 31, 2024
• boltcms bolt The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation,... CVE-2022-31321 9.1 CriticalAugust 1, 2022
• boltcms bolt Path traversal in bolt/core CVE-2021-27367 Fix available 7.5 HighFebruary 17, 2021
• boltcms bolt OS Command injection in Bolt CVE-2020-28925 Fix available 5.3 MediumDecember 30, 2020
• bolt The filename of uploaded files vulnerable to stored XSS in Bolt CMS CVE-2020-4041 Fix available 7.4 HighJune 8, 2020
• bolt CSRF issue on preview pages in Bolt CMS CVE-2020-4040 Public exploitFix available 8.6 HighJune 8, 2020
• boltcms bolt Bolt Cross-site Scripting via the slug, teaser or title parameters CVE-2019-9553 Public exploit 6.1 MediumDecember 31, 2019
• boltcms bolt ** DISPUTED ** Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search... CVE-2019-20058 Disputed 6.1 MediumDecember 29, 2019
• boltcms bolt Cross-site Scripting in Bolt CVE-2019-15485 Fix available 6.1 MediumAugust 23, 2019
• boltcms bolt Bolt Cross-site Scripting (XSS) via an image's alt or title field CVE-2019-15484 Fix available 6.1 MediumAugust 23, 2019
• boltcms bolt Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log CVE-2019-15483 Fix available 6.1 MediumAugust 23, 2019
• boltcms bolt Bolt Cross Site Request Forgery (CSRF) CVE-2019-10874 Public exploitFix available 8.8 HighApril 5, 2019
• boltcms bolt Bolt Unrestricted Upload of File with Dangerous Type CVE-2019-9185 Fix available 8.8 HighMarch 7, 2019
• boltcms bolt Bolt Improper Access Control CVE-2017-16754 Fix available 5.3 MediumNovember 9, 2017
• boltcms bolt Bolt stored Cross-site Scripting (XSS) CVE-2017-11128 5.4 MediumJuly 17, 2017
• boltcms bolt Bolt CMS Stored XSS CVE-2017-11127 5.4 MediumJuly 17, 2017
• boltcms bolt The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files,... CVE-2015-7309 Public exploit EPSS 38.6% 6.5 MediumSeptember 22, 2015