Bolt vulnerabilities

2 known vulnerabilities in Bolt from Boltcms. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CMS: Improper Control of Generation of Code

  CVE-2025-34086Jul 3, 2025BoltEPSS 4.32%

  Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution. A user with valid credentials can inject arbitrary PHP code into the displayname field of the user profile, which

• 9.1 Critical severity

  The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation…

  CVE-2022-31321Aug 1, 2022Boltcms

  The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.