Lucene search

K
osvGoogleOSV:GHSA-FP8M-XW3F-6H7X
HistoryMay 24, 2022 - 10:00 p.m.

Bolt Cross-site Scripting (XSS) via an image's alt or title field

2022-05-2422:00:24
Google
osv.dev
3

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

Bolt before 3.6.10 has XSS via an image’s alt or title field.

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%