CMS vulnerabilities

1 known vulnerability in CMS from Bolt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CMS: Improper Control of Generation of Code

  CVE-2025-34086Jul 3, 2025BoltEPSS 4.32%

  Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution. A user with valid credentials can inject arbitrary PHP code into the displayname field of the user profile, which