Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cross-site Scripting (XSS)

🗓️ 23 May 2025 10:35:41Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

Cross-site Scripting vulnerability in bolt/bolt due to poor input sanitization in Showcase Handler.

Related
Detection
Refs
Vulners
Node
OR
boltbolt/boltRangev0.8.4–0.8.4php
boltbolt/boltMatch3.5.7php
boltbolt/boltMatch3.7.1php
boltbolt/boltRangev0.8.4–0.8.4php
boltbolt/boltRangev0.8.5–0.8.5php
boltbolt/boltRangev0.9.10–0.9.10php
boltbolt/boltRangev0.9.5–0.9.5php
boltbolt/boltRangev1.0.0–1.0.0php
boltbolt/boltRangev1.0.5–1.0.5php
boltbolt/boltRangev1.1.2–1.1.2php
boltbolt/boltRangev1.1.4–1.1.4php
boltbolt/boltRangev1.2.1–1.2.1php
boltbolt/boltRangev1.3.0–1.3.0php
boltbolt/boltRangev1.4.0–1.4.0php
boltbolt/boltRangev1.4.3–1.4.3php
boltbolt/boltRangev1.5.1–1.5.1php
boltbolt/boltRangev1.5.6–1.5.6php
boltbolt/boltRangev1.6.0–1.6.0php
boltbolt/boltRangev1.6.2–1.6.2php
boltbolt/boltRangev1.6.3–1.6.3php
boltbolt/boltRangev1.6.3.1–1.6.3.1php
boltbolt/boltRangev1.6.9–1.6.9php
boltbolt/boltRangev2.0.0–2.0.0php
boltbolt/boltRangev2.0.1–2.0.1php
boltbolt/boltRangev2.0.2–2.0.2php
boltbolt/boltRangev2.0.3–2.0.3php
boltbolt/boltRangev2.0.4–2.0.4php
boltbolt/boltRangev2.0.5–2.0.5php
boltbolt/boltRangev2.0.6–2.0.6php
boltbolt/boltRangev2.1.0–2.1.0php
boltbolt/boltRangev2.1.1–2.1.1php
boltbolt/boltRangev2.1.1-pl1–2.1.1-pl1php
boltbolt/boltRangev2.1.2–2.1.2php
boltbolt/boltRangev2.1.3–2.1.3php
boltbolt/boltRangev2.1.3-pl1–2.1.3-pl1php
boltbolt/boltRangev2.1.4–2.1.4php
boltbolt/boltRangev2.1.4-pl1–2.1.4-pl1php
boltbolt/boltRangev2.1.5–2.1.5php
boltbolt/boltRangev2.1.6–2.1.6php
boltbolt/boltRangev2.1.7–2.1.7php
boltbolt/boltRangev2.1.8–2.1.8php
boltbolt/boltRangev2.1.8-pl1–2.1.8-pl1php
boltbolt/boltRangev2.1.9–2.1.9php
boltbolt/boltRangev2.2.0–2.2.0php
boltbolt/boltRangev2.2.1–2.2.1php
boltbolt/boltRangev2.2.10–2.2.10php
boltbolt/boltRangev2.2.11–2.2.11php
boltbolt/boltRangev2.2.13–2.2.13php
boltbolt/boltRangev2.2.14–2.2.14php
boltbolt/boltRangev2.2.15–2.2.15php
boltbolt/boltRangev2.2.16–2.2.16php
boltbolt/boltRangev2.2.17–2.2.17php
boltbolt/boltRangev2.2.18–2.2.18php
boltbolt/boltRangev2.2.19–2.2.19php
boltbolt/boltRangev2.2.19-pl1–2.2.19-pl1php
boltbolt/boltRangev2.2.2–2.2.2php
boltbolt/boltRangev2.2.20–2.2.20php
boltbolt/boltRangev2.2.21–2.2.21php
boltbolt/boltRangev2.2.22–2.2.22php
boltbolt/boltRangev2.2.23–2.2.23php
boltbolt/boltRangev2.2.24–2.2.24php
boltbolt/boltRangev2.2.25–2.2.25php
boltbolt/boltRangev2.2.3–2.2.3php
boltbolt/boltRangev2.2.4–2.2.4php
boltbolt/boltRangev2.2.5–2.2.5php
boltbolt/boltRangev2.2.6–2.2.6php
boltbolt/boltRangev2.2.7–2.2.7php
boltbolt/boltRangev2.2.8–2.2.8php
boltbolt/boltRangev2.2.9–2.2.9php
boltbolt/boltRangev3.0.0–3.0.0php
boltbolt/boltRangev3.0.1–3.0.1php
boltbolt/boltRangev3.0.10–3.0.10php
boltbolt/boltRangev3.0.11–3.0.11php
boltbolt/boltRangev3.0.12–3.0.12php
boltbolt/boltRangev3.0.2–3.0.2php
boltbolt/boltRangev3.0.3–3.0.3php
boltbolt/boltRangev3.0.4–3.0.4php
boltbolt/boltRangev3.0.5–3.0.5php
boltbolt/boltRangev3.0.6–3.0.6php
boltbolt/boltRangev3.0.7–3.0.7php
boltbolt/boltRangev3.0.8–3.0.8php
boltbolt/boltRangev3.0.9–3.0.9php
boltbolt/boltRangev3.1.0–3.1.0php
boltbolt/boltRangev3.1.1–3.1.1php
boltbolt/boltRangev3.1.2–3.1.2php
boltbolt/boltRangev3.1.3–3.1.3php
boltbolt/boltRangev3.1.4–3.1.4php
boltbolt/boltRangev3.1.5–3.1.5php
boltbolt/boltRangev3.1.6–3.1.6php
boltbolt/boltRangev3.2.0–3.2.0php
boltbolt/boltRangev3.2.1–3.2.1php
boltbolt/boltRangev3.2.10–3.2.10php
boltbolt/boltRangev3.2.11–3.2.11php
boltbolt/boltRangev3.2.12–3.2.12php
boltbolt/boltRangev3.2.13–3.2.13php
boltbolt/boltRangev3.2.14–3.2.14php
boltbolt/boltRangev3.2.15–3.2.15php
boltbolt/boltRangev3.2.16–3.2.16php
boltbolt/boltRangev3.2.17–3.2.17php
boltbolt/boltRangev3.2.18–3.2.18php
boltbolt/boltRangev3.2.19–3.2.19php
boltbolt/boltRangev3.2.2–3.2.2php
boltbolt/boltRangev3.2.20–3.2.20php
boltbolt/boltRangev3.2.3–3.2.3php
boltbolt/boltRangev3.2.4–3.2.4php
boltbolt/boltRangev3.2.5–3.2.5php
boltbolt/boltRangev3.2.6–3.2.6php
boltbolt/boltRangev3.2.7–3.2.7php
boltbolt/boltRangev3.2.8–3.2.8php
boltbolt/boltRangev3.2.9–3.2.9php
boltbolt/boltRangev3.3.0–3.3.0php
boltbolt/boltRangev3.3.1–3.3.1php
boltbolt/boltRangev3.3.2–3.3.2php
boltbolt/boltRangev3.3.3–3.3.3php
boltbolt/boltRangev3.3.4–3.3.4php
boltbolt/boltRangev3.3.5–3.3.5php
boltbolt/boltRangev3.3.6–3.3.6php
boltbolt/boltRangev3.4.0–3.4.0php
boltbolt/boltRangev3.4.1–3.4.1php
boltbolt/boltRangev3.4.10–3.4.10php
boltbolt/boltRangev3.4.11–3.4.11php
boltbolt/boltRangev3.4.2–3.4.2php
boltbolt/boltRangev3.4.3–3.4.3php
boltbolt/boltRangev3.4.4–3.4.4php
boltbolt/boltRangev3.4.5–3.4.5php
boltbolt/boltRangev3.4.6–3.4.6php
boltbolt/boltRangev3.4.7–3.4.7php
boltbolt/boltRangev3.4.8–3.4.8php
boltbolt/boltRangev3.4.9–3.4.9php
boltbolt/boltRangev3.5.0–3.5.0php
boltbolt/boltRangev3.5.1–3.5.1php
boltbolt/boltRangev3.5.2–3.5.2php
boltbolt/boltRangev3.5.3–3.5.3php
boltbolt/boltRangev3.5.4–3.5.4php
boltbolt/boltRangev3.5.5–3.5.5php
boltbolt/boltRangev3.5.6–3.5.6php
boltbolt/boltRangev3.6.0–3.6.0php
boltbolt/boltRangev3.6.0-beta.1–3.6.0-beta.1php
boltbolt/boltRangev3.6.0-beta.2–3.6.0-beta.2php
boltbolt/boltRangev3.6.0-beta.3–3.6.0-beta.3php
boltbolt/boltRangev3.6.0-beta.4–3.6.0-beta.4php
boltbolt/boltRangev3.6.0-beta.5–3.6.0-beta.5php
boltbolt/boltRangev3.6.0-beta.6–3.6.0-beta.6php
boltbolt/boltRangev3.6.0-beta.7–3.6.0-beta.7php
boltbolt/boltRangev3.6.1–3.6.1php
boltbolt/boltRangev3.6.10–3.6.10php
boltbolt/boltRangev3.6.11–3.6.11php
boltbolt/boltRangev3.6.2–3.6.2php
boltbolt/boltRangev3.6.3–3.6.3php
boltbolt/boltRangev3.6.4–3.6.4php
boltbolt/boltRangev3.6.5–3.6.5php
boltbolt/boltRangev3.6.6–3.6.6php
boltbolt/boltRangev3.6.7–3.6.7php
boltbolt/boltRangev3.6.8–3.6.8php
boltbolt/boltRangev3.6.9–3.6.9php
boltbolt/boltRangev3.7.0–3.7.0php

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Dec 2025 06:58Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.13.5 - 5.4
CVSS 24
CVSS 45.3
CVSS 33.5
EPSS0.00403
SSVC
cross-site scriptingbolt/bolt vulnerabilityinput sanitization issueshowcase creation handler
6