Lucene search

K
osvGoogleOSV:GHSA-2G23-QMMP-FVMR
HistoryMay 24, 2022 - 5:05 p.m.

Bolt Cross-site Scripting via the slug, teaser or title parameters

2022-05-2417:05:27
Google
osv.dev
2

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

CPENameOperatorVersion
bolt/bolteq3.6.4

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.0%