← All advisories

Medium severity5.4NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-11127

CVE-2017-11127

Description

Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
bolt/boltPackagist	<= 3.2.14	—

Affected products

2

Boltcms/Bolt
cpe:2.3:a:boltcms:bolt:3.2.14:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/bolt/bolt
Range: <= 3.2.14

Patches

Vulnerability mechanics

References

3

websecnerd.blogspot.in/2017/07/bolt-cms-3.htmlnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-hqxc-w9vw-3hp5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2017-11127ghsaADVISORY

News mentions

0

No linked articles in our index yet.