bolt vulnerabilities
7 published CVEs name bolt among the affected products.
- 7Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-71291
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
bolt · core
High8.8 - CVE-2026-11511
Bolt CMS HTML Attribute TextType.php HTML injection
Bolt · CMS
Medium5.1 - CVE-2025-34086
Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename
Bolt · CMS
High7.5 - CVE-2024-7300
Bolt CMS Showcase Creation showcases cross site scripting
Bolt · CMS
Medium5.3 - CVE-2024-7299
Bolt CMS Entry Preview page cross site scripting
Bolt · CMS
Medium5.3 - CVE-2020-4041
The filename of uploaded files vulnerable to stored XSS in Bolt CMS
bolt · bolt
High7.4 - CVE-2020-4040
CSRF issue on preview pages in Bolt CMS
bolt · bolt
High8.6