bolt/bolt vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-34086Highbolt/bolt: Bolt CMS vulnerable to authenticated remote code execution CVE-2024-7300Mediumbolt/bolt: Bolt CMS Cross-site Scripting vulnerability CVE-2019-15484Mediumbolt/bolt: Bolt Cross-site Scripting (XSS) via an image's alt or title field CVE-2019-9553Mediumbolt/bolt: Bolt Cross-site Scripting via the slug, teaser or title parameters CVE-2019-15483Mediumbolt/bolt: Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log CVE-2017-11127Mediumbolt/bolt: Bolt CMS Stored XSS CVE-2017-11128Mediumbolt/bolt: Bolt stored Cross-site Scripting (XSS)CVE-2018-19933Mediumbolt/bolt: Bolt Cross-site Scripting (XSS) via text input click preview button CVE-2019-9185Highbolt/bolt: Bolt Unrestricted Upload of File with Dangerous Type CVE-2019-10874Highbolt/bolt: Bolt Cross Site Request Forgery (CSRF)CVE-2017-16754Mediumbolt/bolt: Bolt Improper Access Control CVE-2020-28925Mediumbolt/bolt: OS Command injection in Bolt CVE-2020-4040Highbolt/bolt: CSRF issue on preview pages in Bolt CMS CVE-2020-4041Highbolt/bolt: The filename of uploaded files vulnerable to stored XSS CVE-2019-15485Mediumbolt/bolt: Cross-site Scripting in Bolt

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo