Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4810
HistoryJul 30, 2017 - 9:07 a.m.

Cross-site Scripting (XSS)

2017-07-3009:07:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

EPSS

0.001

Percentile

23.8%

Bolt CMS is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary javascript by uploading a SVG file with Content-Type: image/svg+xml in it’s header to the application when editing a page.

EPSS

0.001

Percentile

23.8%

Related for VERACODE:4810