Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4809
HistoryJul 30, 2017 - 8:54 a.m.

Cross-site Scripting (XSS)

2017-07-3008:54:46
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

EPSS

0.001

Percentile

23.8%

Bolt CMS is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the user input, allowing a malicious user to inject and execute arbitrary javascript through the Title Field of a new entry.

EPSS

0.001

Percentile

23.8%

Related for VERACODE:4809