PT-2019-19704 · Bolt Cms+2 · Bolt+1

·

CVE-2019-9553

·

Published

2019-12-31

·

Updated

2022-05-24

CVSS v2.0

4.3

Medium

VectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2019-9553
GHSA-2G23-QMMP-FVMR

Affected Products

Bolt
Bolt/Bolt