Skip to content

Product

bolt cms vulnerabilities

3 published CVES affecting bolt cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest bolt cms CVEs

Newest publication first

  1. CVE-2026-11511 Bolt CMS HTML Attribute TextType.php HTML injection

    Published
    MediumCVSS 5.1 EPSS 0.19%

    A weakness has been identified in Bolt CMS up to 3.7.5. This vulnerability affects unknown code of the file src/Storage/Field/Type/TextType.php of the component HTML Attribute Handler. Executing a manipulation of the argument style can lead to HTML injection. It is possible to la...

  2. CVE-2024-7300 Bolt CMS Showcase Creation showcases cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.40%

    A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/showcases of the component Showcase Creation Handler. The manipulation of the argument title/textarea leads to cross site scripting. It is pos...

  3. CVE-2024-7299 Bolt CMS Entry Preview page cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.39%

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component Entry Preview Handler. The manipulation of the argument body leads to cross site sc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.