CVE-2019-9553

MEDIUM WAF: High
CVSS 6.1 Published: 2019-12-31
CWE-79

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

WAF Coverage Analysis

Cross-Site Scripting (XSS) High WAF Coverage

OWASP: A03:2021 Injection

941xxx - XSS / XXE

Affected Software

VendorProductVersion
boltcmsbolt3.6.4

References

Back to CVE Database