CVE-2017-11127

creationtimestamp| type| source ---|---|--- 2025-02-14 15:13:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4454 2025-02-14 21:08:29+00:00| seen| Telegram/RWwwEXBIoomb8BON9vObdqaArnjTrGDOMw2T5SMauTkWcrh...

CVE-2017-11127

Bolt CMS 3.2.14 is affected by a stored XSS via uploading an SVG document with Content-Type: image/svg+xml. The vulnerability stems from how Bolt handles SVG uploads, enabling arbitrary script execution in stored context. Affected component is Bolt CMS’s upload/SVG handling for page content. Impa...