medium5.4
CVE-2017-11128
Bolt stored Cross-site Scripting (XSS)
Impact
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | bolt/bolt | = 3.2.14 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boltcms | Bolt | Version 3.2.14 |