CVE-2024-7299 - Bolt CMS Entry Preview page cross site scripting

Back Back to CVE browser

MEDIUM

Bolt CMS Entry Preview page cross site scripting

Published Jul 31, 2024

5.3

MEDIUM

CVSS 4.0

EPSS 0.39%

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component Entry Preview Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273167. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.

Affected products

Vendor Bolt Product CMS Default
n/a
- Version
  3.7.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bolt

CMS

n/a

Version	Status	Constraints
3.7.1	affected	-

Vendor Bolt Product Bolt Cms Default
n/a
- Version
  3.7.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Bolt

Bolt Cms

n/a

Version	Status	Constraints
3.7.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://vuldb.com/?ctiid.273167
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273167
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.379971
third-party-advisoryExploitVDB Entry

Link	Providers	Tags
https://vuldb.com/?ctiid.273167		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.273167		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.379971		third-party-advisoryExploitVDB Entry