Cross-site Scripting (XSS)

bolt/bolt is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input sanitization of the title and textarea parameters in the Showcase Creation Handler, allowing injection of malicious scripts...

SQL Injection

bolt/bolt is vulnerable to SQL injection attacks. A malicious user can inject arbitrary SQL statements because it fails to use a prepared statement for groupconcatmaxlen query...