~ / search / GHSA-ph84-vg7q-fqq8

GHSA-ph84-vg7q-fqq8

Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-15483

Packages

EcosystemPackageAffectedFixed in
Packagist bolt/bolt < 3.6.10 3.6.10

Details

As written in the advisory (Markdown source, shown as plain text).

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.

References

External links from the advisory. They lead to third-party sites.