Lucene search

K
osvGoogleOSV:GHSA-FP8M-XW3F-6H7X
HistoryMay 24, 2022 - 10:00 p.m.

Bolt Cross-site Scripting (XSS) via an image's alt or title field

2022-05-2422:00:24
Google
osv.dev
4
bolt
cross-site scripting
image vulnerability

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

29.3%

Bolt before 3.6.10 has XSS via an image’s alt or title field.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

29.3%