Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-7300

Опубликовано: 31 июл. 2024
Источник: nvd
CVSS3: 3.5
CVSS3: 5.4
CVSS2: 4
EPSS Низкий

Описание

A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/showcases of the component Showcase Creation Handler. The manipulation of the argument title/textarea leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed that the affected release tree is end-of-life.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:boltcms:bolt:3.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%
0.00166
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.5
github
больше 1 года назад

Bolt CMS Cross-site Scripting vulnerability

EPSS

Процентиль: 38%
0.00166
Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-79