Security Advisories - bolt/bolt - Packagist

bolt/bolt Security Advisories for v1.6.3.1 (5)

Bolt CMS Stored XSS

CVE-2017-11127

Affected version: <=3.2.14

Reported by:
GitHub
OS Command injection in Bolt

CVE-2020-28925

Affected version: <3.7.2

Reported by:
GitHub
CSRF issue on preview pages in Bolt CMS

CVE-2020-4040

Affected version: <3.7.1

Reported by:
GitHub
The filename of uploaded files vulnerable to stored XSS

CVE-2020-4041

Affected version: <3.7.1

Reported by:
GitHub
Cross-site Scripting in Bolt

CVE-2019-15485

Affected version: <3.6.10

Reported by:
GitHub