Boltcms / Bolt
19 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-34086 | Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename | HIGH | 7.5 | Jul 3, 2025 |
| CVE-2024-7300 | Bolt CMS Showcase Creation showcases cross site scripting | MEDIUM | 5.3 | Jul 31, 2024 |
| CVE-2024-7299 | Bolt CMS Entry Preview page cross site scripting | MEDIUM | 5.3 | Jul 31, 2024 |
| CVE-2022-31321 | The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial… | CRITICAL | 9.1 | Aug 1, 2022 |
| CVE-2021-27367 | Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. | HIGH | 7.5 | Feb 17, 2021 |
| CVE-2020-28925 | Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better… | MEDIUM | 5.3 | Dec 30, 2020 |
| CVE-2020-4041 | The filename of uploaded files vulnerable to stored XSS in Bolt CMS | HIGH | 7.4 | Jun 8, 2020 |
| CVE-2020-4040 | CSRF issue on preview pages in Bolt CMS | HIGH | 8.6 | Jun 8, 2020 |
| CVE-2019-9553 | Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933. | MEDIUM | 6.1 | Dec 31, 2019 |
| CVE-2019-20058 | Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because… | MEDIUM | 6.1 | Dec 29, 2019 |
| CVE-2019-15485 | Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php. | MEDIUM | 6.1 | Aug 23, 2019 |
| CVE-2019-15484 | Bolt before 3.6.10 has XSS via an image's alt or title field. | MEDIUM | 6.1 | Aug 23, 2019 |
| CVE-2019-15483 | Bolt before 3.6.10 has XSS via a title that is mishandled in the system log. | MEDIUM | 6.1 | Aug 23, 2019 |
| CVE-2019-10874 | Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a Jav… | HIGH | 8.8 | Apr 5, 2019 |
| CVE-2019-9185 | Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously u… | HIGH | 8.8 | Mar 7, 2019 |
| CVE-2017-16754 | Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvide… | MEDIUM | 5.3 | Nov 9, 2017 |
| CVE-2017-11128 | Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry. | MEDIUM | 5.4 | Jul 17, 2017 |
| CVE-2017-11127 | Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header. | MEDIUM | 5.4 | Jul 17, 2017 |
| CVE-2015-7309 | The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code… | MEDIUM | 6.5 | Sep 22, 2015 |
Showing 1 to 19 of 19 CVEs