Описание
Bolt Cross-site Scripting (XSS) via text input click preview button
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.
Пакеты
Наименование
bolt/bolt
composer
Затронутые версииВерсия исправления
< 3.6.2
3.6.2
Связанные уязвимости
CVSS3: 6.1
nvd
около 7 лет назад
Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.