Lucene search
Veracode Vulnerability DatabaseVERACODE:21377HistoryAug 26, 2019 - 9:55 a.m.
Cross-Site Scripting (XSS)
2019-08-2609:55:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
29.3%
bolt/bolt is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the user input, allowing a malicious attacker to inject and execute arbitrary html and script code into the web site through an image’s alt or the title field.
Related
osv
osv
Bolt Cross-site Scripting (XSS) via an image's alt or title field
2022-05-24 22:00:24
CVE-2019-15484
2019-08-23 13:15:11
prion
prion
Cross site scripting
2019-08-23 13:15:00
cvelist
cvelist
CVE-2019-15484
2019-08-23 12:30:05
github
github
Bolt Cross-site Scripting (XSS) via an image's alt or title field
2022-05-24 22:00:24
cve
cve
CVE-2019-15484
2019-08-23 13:15:11
nvd
nvd
CVE-2019-15484
2019-08-23 13:15:11
cbl_mariner
cbl_mariner
CVE-2019-15484 affecting package bolt 0.9.2-2
2024-09-21 03:20:41
rosalinux
rosalinux
Advisory ROSA-SA-2021-1809
2021-07-02 16:34:28