Pranavh4X0R

**Name of the Vulnerable Software and Affected Versions** MyBB version 1.8.14 **Description** The issue allows for XSS via the Title or Description field on the Edit Forum screen. **Recommendations** For MyBB version 1.8.14, update to a version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Bolt CMS version 3.2.14 **Description** The issue allows for stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header. This can be exploited by uploading a malicious SVG file. **Recommendations** For Bolt CMS version 3.2.14, consider restricting the upload of SVG documents or validating the `Content-Type` header to prevent malicious uploads until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Bolt CMS version 3.2.14 **Description** The issue allows stored XSS via text input, as demonstrated by the Title field of a New Entry. This can be exploited by injecting malicious code into the text input fields. **Recommendations** For Bolt CMS version 3.2.14, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the text input fields, such as the Title field of a New Entry, to minimize the risk of exploitation. Avoid using the `title` field in the affected entry creation process until the issue is resolved.