CVE-2017-11127

2017-07-1719:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a “Content-Type: image/svg+xml” header.

CPENameOperatorVersion
bolteq2.0.0
bolteq3.1.2
bolteq3.2.6
bolteq3.1.5
bolteq3.1.4
bolteq3.2.7
bolteq3.1.0
bolteq1.5.6
bolteq0.8.5
bolteq1.6.3.1

Name	Operator	Version
bolt	eq	2.0.0
bolt	eq	3.1.2
bolt	eq	3.2.6
bolt	eq	3.1.5
bolt	eq	3.1.4
bolt	eq	3.2.7
bolt	eq	3.1.0
bolt	eq	1.5.6
bolt	eq	0.8.5
bolt	eq	1.6.3.1

Rows per page:

1-10 of 611

References

websecnerd.blogspot.in/2017/07/bolt-cms-3.html