CVE-2019-9553 - Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933

MEDIUM

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933

Published Dec 31, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.75%

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/advisories/GHSA-2g23-qmmp-fvmr		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9553
https://packetstormsecurity.com/files/151943/Bold-CMS-3.6.4-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/46495		x_refsource_MISCExploitThird Party AdvisoryVDB Entry