← All advisories

Medium severity6.1NVD Advisory· Published Dec 31, 2019· Updated Jun 17, 2026

CVE-2019-9553

CVE-2019-9553

Description

Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Boltcms/Bolt
cpe:2.3:a:boltcms:bolt:3.6.4:*:*:*:*:*:*:*
Bolt/Boltdescription
ghsa-coords
pkg:composer/bolt/bolt

Patches

Vulnerability mechanics

References

4

packetstormsecurity.com/files/151943/Bold-CMS-3.6.4-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
www.exploit-db.com/exploits/46495nvdExploitThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-2g23-qmmp-fvmrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-9553ghsaADVISORY

News mentions

0

No linked articles in our index yet.