Bolt CMS Stored XSS

2022-05-1702:27:47

Google

osv.dev

0.001 Low

EPSS

Percentile

24.1%

JSON

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a “Content-Type: image/svg+xml” header.

CPENameOperatorVersion
bolt/bolteq3.1.3
bolt/bolteq2.1.8-pl1
bolt/bolteq3.0.7
bolt/bolteq2.2.21
bolt/bolteq3.2.0
bolt/bolteq3.2.7
bolt/bolteq3.2.2
bolt/bolteq2.0.2
bolt/bolteq2.1.8
bolt/bolteq3.1.6

Name	Operator	Version
bolt/bolt	eq	3.1.3
bolt/bolt	eq	2.1.8-pl1
bolt/bolt	eq	3.0.7
bolt/bolt	eq	2.2.21
bolt/bolt	eq	3.2.0
bolt/bolt	eq	3.2.7
bolt/bolt	eq	3.2.2
bolt/bolt	eq	2.0.2
bolt/bolt	eq	2.1.8
bolt/bolt	eq	3.1.6