bolt_cms vulnerabilities

CVEs whose affected-version data names the bolt_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2021-40219High· 8.8

4y ago

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.

▾ Twilightbolt · bolt_cmsEPSS 3.4%via NVD