bolt vulnerabilities
7 published CVEs name bolt among the affected products.
- Published CVEs
- 7
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20202
- 20242
- 20251
- 20262
Newest CVEs
- CVE-2026-71291
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
bolt · core
High8.8 - CVE-2026-11511
Bolt CMS HTML Attribute TextType.php HTML injection
Bolt · CMS
Medium5.1 - CVE-2025-34086
Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename
Bolt · CMS
High7.5 - CVE-2024-7300
Bolt CMS Showcase Creation showcases cross site scripting
Bolt · CMS
Medium5.3 - CVE-2024-7299
Bolt CMS Entry Preview page cross site scripting
Bolt · CMS
Medium5.3 - CVE-2020-4041
The filename of uploaded files vulnerable to stored XSS in Bolt CMS
bolt · bolt
High7.4 - CVE-2020-4040
CSRF issue on preview pages in Bolt CMS
bolt · bolt
High8.6