p PatchFirst

CVE-2017-11128

CVE-2017-11128

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.

CVSS 5.4 · Medium · EPSS 0.6%

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • bolt/bolt Packagist

    Versions
    • 3.2.14

    No fix published

Original sources

Check your server →