Boltcms vulnerabilities
We track 2 vulnerabilities in Boltcms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 3, 2025.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Boltcms vulnerabilities
- 8.8 High severity
CMS: Improper Control of Generation of Code
Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution. A user with valid credentials can inject arbitrary PHP code into the displayname field of the user profile, which
- 9.1 Critical severity
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation…
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.