PT-2020-17848 · Bolt · Bolt Cms

Name of the Vulnerable Software and Affected Versions: Bolt CMS versions prior to 3.7.1 Description: The filename of uploaded files was vulnerable to stored XSS. It is not possible to inject javascript code in the file name when creating/uploading the file. But, once created/uploaded, it can be...