~ / search / GHSA-fp8m-xw3f-6h7x

GHSA-fp8m-xw3f-6h7x

Bolt Cross-site Scripting (XSS) via an image's alt or title field

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-15484

Packages

EcosystemPackageAffectedFixed in
Packagist bolt/bolt < 3.6.10 3.6.10

Details

As written in the advisory (Markdown source, shown as plain text).

Bolt before 3.6.10 has XSS via an image's alt or title field.

References

External links from the advisory. They lead to third-party sites.