CVE-2021-40219

2022-04-1117:15:08

Google

osv.dev

9.2 High

AI Score

Confidence

High

0.072 Low

EPSS

Percentile

94.1%

JSON

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.

CPENameOperatorVersion
coreeq4.0.0-beta.2.4
coreeq4.1.7.1
coreeq4.0.0-beta.2.7
coreeq4.2.0
coreeq4.1.8
coreeq4.1.2
coreeq4.0.0-beta.5.1
coreeq4.2.0-beta.14
coreeq4.0.0-rc.3
coreeq4.0.0-rc.33

Name	Operator	Version
core	eq	4.0.0-beta.2.4
core	eq	4.1.7.1
core	eq	4.0.0-beta.2.7
core	eq	4.2.0
core	eq	4.1.8
core	eq	4.1.2
core	eq	4.0.0-beta.5.1
core	eq	4.2.0-beta.14
core	eq	4.0.0-rc.3
core	eq	4.0.0-rc.33