rdincel1/Bolt-CMS-3.6.2---Cross-Site-Scripting

rdincel1/Bolt-CMS-3.6.2---Cross-Site-Scripting

GitHubGitHub
GitHubgithub.com
Releases0
Bolt CMS <3.6.2 - Cross-Site Scripting Vulnerability
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-19933↗
—4.3 MEDIUM

Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.