Security Advisories - bolt/bolt - Packagist

bolt/bolt Security Advisories for v3.5.5 (4)

OS Command injection in Bolt

CVE-2020-28925

Affected version: <3.7.2

Reported by:
GitHub
CSRF issue on preview pages in Bolt CMS

CVE-2020-4040

Affected version: <3.7.1

Reported by:
GitHub
The filename of uploaded files vulnerable to stored XSS

CVE-2020-4041

Affected version: <3.7.1

Reported by:
GitHub
Cross-site Scripting in Bolt

CVE-2019-15485

Affected version: <3.6.10

Reported by:
GitHub