PT-2019-12067

Name of the Vulnerable Software and Affected Versions Bolt CMS version 3.6.6 Description The issue allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file through the bolt/upload File...