CVE-2024-7299 Bolt CMS Entry Preview page cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component Entry Preview Handler. The manipulation of the argument body leads to cross site scripting. The attack may...

CVE-2024-7299 Bolt CMS Entry Preview page cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component Entry Preview Handler. The manipulation of the argument body leads to cross site scripting. The attack may...

CVE-2024-7299

Bolt CMS 3.7.1 is affected by a cross-site scripting vulnerability in the Entry Preview Handler, specifically when processing the /preview/page endpoint. The root cause is manipulation of the body parameter in that component, which can be exploited remotely. The issue is associated with end-of-li...

Bolt CMS 跨站脚本漏洞

Bolt CMS is Bolt CMS open source PHP-based open source content management system . A cross-site scripting vulnerability exists in Bolt CMS version 3.7.1, which stems from the parameter body in the file /preview/page can lead to cross-site scripting. No detailed vulnerability details are currently...

PT-2024-38246 · Bolt Cms · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS version 3.7.1 Description: A vulnerability was found in the Entry Preview Handler component, affecting the processing of the file /preview/page. The manipulation of the body argument leads to cross-site scripting. The attack can be...

Bolt CMS Arbitrary File Upload (CVE-2022-36532)

An arbitrary file upload vulnerability exists in Bolt CMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-36532

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...

CVE-2022-36532

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...

CVE-2022-36532

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...

Remote code execution

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...

CVE-2022-36532

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLEEDITOR privileges to upload and rename a malicious file to achieve remote code execution...

CVE-2022-36532

Summary: Bolt CMS

PT-2022-23451 · Bolt Cms · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS versions 5.1.12 and below Description: The issue allows an authenticated user with the ROLE EDITOR privileges to upload and rename a malicious file, achieving remote code execution. Recommendations: For versions 5.1.12 and below,...

Exploit for CVE-2022-36532

Proof of Concept for CVE-2022-36532 A vulnerability in Bolt C...

GHSA-HQXC-W9VW-3HP5 Bolt CMS Stored XSS

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header...

GHSA-5R9J-698H-2H5M Bolt stored Cross-site Scripting (XSS)

Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry...

Bolt CMS Stored XSS

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header...

Bolt stored Cross-site Scripting (XSS)

Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry...

GHSA-GJX6-58XH-P7PW Bolt Cross-site Scripting (XSS) via text input click preview button

Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry...

Bolt Cross-site Scripting (XSS) via text input click preview button

Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry...