{"id":"GHSA-5r9j-698h-2h5m","aliases":["CVE-2017-11128"],"title":"Bolt stored Cross-site Scripting (XSS)","description":"Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.","severity":"medium","score":5.4,"published":"2022-05-17T02:27:47.000Z","modified":"2024-04-23T23:42:48.848Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"bolt/bolt","ranges":[],"versions":["3.2.14"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-11128","https://github.com/bolt/bolt","https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html"],"sources":[{"name":"OSV","id":"GHSA-5r9j-698h-2h5m","modified":"2024-04-23T23:42:48.848913Z","url":"https://osv.dev/vulnerability/GHSA-5r9j-698h-2h5m"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","score":5.4}]}