Executive brief
Bolt Cross-site Scripting (XSS) via text input click preview button
Affected products
- Packagist bolt/bolt
Junglewise Threat Intelligence
CVE-2018-19933: Bolt Cross-site Scripting (XSS) via text input click preview button
CVE-2018-19933 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: bolt/bolt (Packagist). Vendors: Packagist.
Related threats
- Bolt CMS vulnerable to authenticated remote code execution
- Bolt CMS Cross-site Scripting vulnerability
- Bolt Cross-site Scripting (XSS) via an image's alt or title field
- Bolt Cross-site Scripting via the slug, teaser or title parameters
- Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log