Lucene search

K
osvGoogleOSV:GHSA-GPRH-7767-CW39
HistoryApr 12, 2022 - 12:00 a.m.

Code Injection in Bolt CMS

2022-04-1200:00:34
Google
osv.dev
37

0.072 Low

EPSS

Percentile

94.1%

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.

0.072 Low

EPSS

Percentile

94.1%

Related for OSV:GHSA-GPRH-7767-CW39