CVE-2018-19933: Improper Neutralization of Input During Web Page Generation

Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry...

PT-2018-15172

Name of the Vulnerable Software and Affected Versions Bolt CMS versions prior to 3.6.2 Description The issue allows for XSS via text input when the click preview button is used, as demonstrated by the Title field of a Configured and New Entry. Recommendations For versions prior to 3.6.2, update t...