What is GHSA-gjx6-58xh-p7pw?

GHSA-gjx6-58xh-p7pw is a security advisory published by GitHub Security Advisories with Medium severity. Bolt Cross-site Scripting (XSS) via text input click preview button

Which CVE IDs does GHSA-gjx6-58xh-p7pw cover?

GHSA-gjx6-58xh-p7pw covers the following CVE IDs: CVE-2018-19933. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gjx6-58xh-p7pw?

GHSA-gjx6-58xh-p7pw has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-gjx6-58xh-p7pw?

GHSA-gjx6-58xh-p7pw affects 1 product, including: composer/bolt/bolt:\u003c 3.6.2.

GHSA-gjx6-58xh-p7pwMediumCVSS 6.1

Bolt Cross-site Scripting (XSS) via text input click preview button

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

May 3, 2024

🔗 CVE IDs covered (1)

CVE-2018-19933 →

📋 Description

Bolt CMS <3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry.

🎯 Affected products1

composer/bolt/bolt:< 3.6.2

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-19933
https://github.com/rdincel1/Bolt-CMS-3.6.2---Cross-Site-Scripting
https://www.raifberkaydincel.com/bolt-cms-xss-vulnerability.html
https://www.exploit-db.com/exploits/46014
https://github.com/advisories/GHSA-gjx6-58xh-p7pw