Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
20 results
Aug 13, 2024A vulnerability was found in wanglongcn ltcms 1.0.20.CVE-2024-7743 · Other software · wanglongcn · reported by VulDBMedium 6.9
A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- ltcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024A vulnerability was found in wanglongcn ltcms 1.0.20.CVE-2024-7742 · Other software · wanglongcn · reported by VulDBMedium 6.9
A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- ltcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical.CVE-2024-7741 · Other software · wanglongcn · reported by VulDBMedium 6.9
A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- ltcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2024A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical.CVE-2024-7740 · Other software · wanglongcn · reported by VulDBMedium 6.9
A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- ltcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 1, 2022The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial CVE-2022-31321 · Other software · Boltcms · reported by MITRECritical 9.1
The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 17, 2021Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.CVE-2021-27367 · Other software · Boltcms · reported by MITREHigh 7.5
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 2020Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better SCVE-2020-28925 · Other software · Boltcms · reported by MITREMedium 5.3
Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2019Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.CVE-2019-9553 · Other software · Boltcms · reported by MITREMedium 6.1
Bolt 3.6.4 has XSS via the slug, teaser, or title parameter to editcontent/pages, a related issue to CVE-2017-11128 and CVE-2018-19933.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Dec 29, 2019Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page.CVE-2019-20058 · Other software · Boltcms · reported by MITREMedium 6.1
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the _profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2019Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.CVE-2019-15485 · Other software · Boltcms · reported by MITREMedium 6.1
Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2019Bolt before 3.6.10 has XSS via an image's alt or title field.CVE-2019-15484 · Other software · Boltcms · reported by MITREMedium 6.1
Bolt before 3.6.10 has XSS via an image's alt or title field.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 23, 2019Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.CVE-2019-15483 · Other software · Boltcms · reported by MITREMedium 6.1
Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 5, 2019Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaCVE-2019-10874 · Other software · Boltcms · reported by MITREHigh 8.8
Cross Site Request Forgery (CSRF) in the bolt/upload File Upload feature in Bolt CMS 3.6.6 allows remote attackers to execute arbitrary code by uploading a JavaScript file to include executable extensions in the file/edit/config/config.yml configuration file.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comfgsec.net
Mar 7, 2019Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously upCVE-2019-9185 · Other software · Boltcms · reported by MITREHigh 8.8
Controller/Async/FilesystemManager.php in the filemanager in Bolt before 3.6.5 allows remote attackers to execute arbitrary PHP code by renaming a previously uploaded file to have a .php extension.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2018Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.CVE-2018-19904 · Other software · Xsltcms.org Project · reported by MITREMedium 6.1
Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page "body" field.
- Product
- Xsltcms.org
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2018Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.CVE-2018-19903 · Other software · Xsltcms.org Project · reported by MITREMedium 6.1
Persistent XSS exists in XSLT CMS via the create/?action=items.edit&type=Page title field.
- Product
- Xsltcms.org
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 9, 2017Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProviderCVE-2017-16754 · Other software · Boltcms · reported by MITREMedium 5.3
Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvider.php.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comgithub.com
Jul 17, 2017Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.CVE-2017-11128 · Other software · Boltcms · reported by MITREMedium 5.4
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwebsecnerd.blogspot.inwebsecnerd.blogspot.in
Jul 17, 2017Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.CVE-2017-11127 · Other software · Boltcms · reported by MITREMedium 5.4
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwebsecnerd.blogspot.inwebsecnerd.blogspot.in
Sep 22, 2015The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code bCVE-2015-7309 · Other software · Boltcms · reported by MITREMedium 6.5
The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to execute arbitrary code by renaming a crafted file and then directly accessing it.
- Product
- Bolt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.curesec.compacketstormsecurity.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.